562841 matches found
ROS-20260821-73-0004
The vulnerability of the nftchainlookupbyid function in the net/netfilter/nftablesapi.c module of the netfilter component of the Linux operating system is related to the use of a previously released resource. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
ROS-20260821-73-0046
The vulnerability of the xfrmixmit function in the net/xfrm/xfrminterfacecore.c module, which implements networking functions in the Linux kernel, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
ROS-20260821-73-0048
The vulnerability of the fchmiscsetup function in the drivers/acpi/acpiapd.c module of the ACPI driver an extended configuration and power management interface for the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...
ROS-20260821-73-0001
The vulnerability of the virtnetopen function in the virtionet component of the Linux operating system is related to incorrect initialization of the resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260821-73-0013
The vulnerability of the qla24xxbuildscsitype6iocbs function in the drivers/scsi/qla2xxx/qlaiocb.c module of the Linux SCSI device driver relates to the pointer assignment. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260821-73-0059
The vulnerability of the ext4getgroupinfo function in the fs/ext4/ext4.h file of the Ext4 file system in the Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a system failure...
ROS-20260821-73-0041
The vulnerability of the devfreqdevrelease function in the Linux operating system’s kernel is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a perpetrator to cause a service failure...
ROS-20260821-73-0028
The vulnerability of the ocfs2deleteosb function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2026-80249
Impact Before JSONata 2.2.0 and 1.8.8 it was possible to execute arbitrary code with crafted expressions, due to a missing hasOwnProperty check in the lookup function: https://github.com/jsonata-js/jsonata/blob/f9632e01e6e67d4f9f00593f9795420cb4b57f48/src/functions.jsL1686-L1705 This was fixed wi...
ROS-20260821-73-0055
The vulnerability of the tipclinkprotorcv function in the Linux operating system is related to the unlimited distribution of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260821-73-0040
The vulnerability of the nulltimeoutrq function in the Linux operating system’s kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to trigger a service failure...
ROS-20260821-73-0073
The vulnerability of the otx2ptpdestroy function in the drivers/net/ethernet/marvell/octeontx2/nic/otx2ptp.c file of the Ethernet network adapter driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote...
The vulnerability in the `src/phpMyFAQ/Controller/Api/SetupController.php` file of the phpMyFAQ web application allows a perpetrator to gain unauthorized access to protected information and cause service failure.
The vulnerability of the src/phpMyFAQ/Controller/Api/SetupController.php file in the phpMyFAQ web application is related to the lack of authentication for the critical function. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information and cause...
PT-2026-80293
Summary An SQL Injection Vulnerability has been found when executing OGC Filters with PostGIS DataStore implementation: jsonArrayContains function Requires PostGIS 12 or greater with a String or JSON field For PostGIS 12 and greater jsonArrayContains, , function writes into generated SQL without...
ROS-20260821-73-0065
The vulnerability of the rawsmpprocessorid function in the Linux operating system is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux Distros Unpatched Vulnerability : CVE-2026-73255
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mongoose is an embedded web server and network library. Prior to 7.22, an attacker who can control an SSI- enabled file can place directory traversal sequences ...
PT-2026-80232
Before JSONata 2.2.1 and 1.8.8 it was possible to execute arbitrary code with crafted expressions, due to: - overwriting $clone allowing mutation of objects via transforms see evaluateTransformExpression - it being possible to destruct jsonata functions/lambdas e.g. $merge. - applyProcedure using...
PT-2026-79457
Name of the Vulnerable Software and Affected Versions Xinference versions prior to 2.7.0 Description Xinference passes attacker-influenced Llama3 tool-call output to the eval function within xinference/model/llm/tool parsers/llama3 tool parser.py and xinference/model/llm/utils.py. Requests sent t...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-102696)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102696 advisory. Buffer Overflow vulnerability in FFmpeg 4.2 at the lagfunframe16 function in libavfilter/vflagfun.c, which could let a remote malicious user cause Denial of Service...
PT-2026-79431
A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.6.2. This issue affects the function FlwInstanceController/FlwDefinitionController/FlwCategoryController/FlwSpelController/TestLeaveController of the component Workflow Endpoint. Such manipulation leads to improper authorization. Th...