The vulnerability of the RoundCube Webmail email client, which stems from the lack of validation for incoming requests, allows attackers to disclose protected information.

The vulnerability of the RoundCube Webmail client lies in the lack of validation for incoming requests. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

PT-2026-36459

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to March 2026 Description An out-of-bounds OOB access issue exists in the Linux kernel within the MPLS implementation. RCU-protected codepaths, specifically the mpls forward and mpls dump routes functions, can...

[SECURITY] Fedora 44 Update: lemonldap-ng-2.22.3-1.fc44

LemonLdap::NG is a modular Web-SSO based on Apache::Session modules. It simplifies the build of a protected area with a few changes in the application. It manages both authentication and authorization and provides headers for accounting. So you can have a full AAA protection for your web space as...

The vulnerability of the Gogs self-managed Git repository creation software lies in the possibility of manipulating arguments, allowing attackers to compromise the integrity and accessibility of the protected information.

The vulnerability of the Gogs self-managed Git repository creation software is related to the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor to compromise the integrity and accessibility of the protected information...

The vulnerability of Google Chrome’s Compositing component allows attackers to gain access to protected information.

The vulnerability of Google Chrome’s Compositing component is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to protected information...

The vulnerability of the Google Chrome browser’s Views component allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Google Chrome browser’s Views component relates to the possibility of memory usage after deallocation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

ROS-20260430-73-0015

Vulnerability in golang related to flaws in authorization mechanism. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...

Authorization Bypass

spring-security-config is vulnerable to Authorization Bypass. The vulnerability is due to incorrect handling of the servlet-path attribute in , where the servlet path is not included when computing the path matcher, causing defined authorization rules to be skipped and allowing unauthorized acces...

CVE-2026-35155

Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Credentials vulnerability. A race condition vulnerability exists that could allow an authenticated low‑privileged attacker to gain elevated access...

CVE-2026-35155

Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Credentials vulnerability. A race condition vulnerability exists that could allow an authenticated low‑privileged attacker to gain elevated access...

The vulnerability of the mpi3mrremove() function in Linux operating system kernels allows a attacker to compromise the accessibility of protected information.

The vulnerability of the mpi3mrremove function in Linux operating systems is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the mpi3mr_init_ioc() function in Linux operating systems allows a attacker to compromise the accessibility of protected information.

The vulnerability of the mpi3mrinitioc function in Linux operating systems is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the htc_tx_completion() function in Linux operating systems allows a attacker to compromise the accessibility of protected information.

The vulnerability of the htctxcompletion function in Linux operating systems is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the rcu_barrier() function in Linux operating systems allows a attacker to compromise the accessibility of protected information.

The vulnerability of the rcubarrier function in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

The vulnerability of the cxl_port_attach_region() function in Linux operating systems allows a attacker to compromise the accessibility of protected information.

The vulnerability of the cxlportattachregion function in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the alloc_sk_msg() function in Linux operating systems allows a attacker to compromise the accessibility of protected information.

The vulnerability of the allocskmsg function in Linux operating systems relates to the possibility of using memory after it has been freed. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the i915_gem_object_is_framebuffer() function in Linux kernel allows a attacker to compromise the accessibility of protected information.

The vulnerability of the i915gemobjectisframebuffer function in Linux operating systems is related to the unlimited distribution of resources. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

The vulnerability of the kunit_filter_tests() function in Linux operating systems allows a attacker to compromise the accessibility of protected information.

The vulnerability of the kunitfiltertests function in Linux operating systems is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the unregister_region() function in Linux operating system kernels, which allows a hacker to compromise the accessibility of protected information

The vulnerability of the unregisterregion function in Linux operating systems is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the amdgpu_amdkfd_gpuvm_acquire_process_vm() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c file of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the amdgpuamdkfdgpuvmacquireprocessvm function in the drivers/gpu/drm/amd/amdgpu/amdgpuamdkfdgpuvm.c file of the Linux kernel is related to the reallocation of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...