39696 matches found
This Week in Spring - March 17th, 2026
Hi, Spring fans! Welcome to another rip-roaring installment of This Week in Spring , which I'm posting ahead of my keynote at the amazing JavaOne 2026 event here in sunny San Francisco, California! I love Piotr's latest post on using local AI models with LM Studio and Spring AI Did you see the ne...
MongoDB Server 安全漏洞
MongoDB Server is an open-source NoSQL database developed by MongoDB, a US-based company. This database offers features such as collection-oriented storage, dynamic querying, data replication, and automatic failover. There is a security vulnerability in MongoDB Server, which can be triggered when...
Debian dsa-6166 : libnode-dev - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6166 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6166-1 [email protected] https://www.debian.org/securit...
Veeam Agent for Linux: Update Blocked by Repository Signing Key Change
Article Applicability This article is intended for customers managing Veeam Agent for Linux 6.3 deployments. Deployments that have already been updated to Veeam Agent for Linux 13, or are being updated to it, are not affected by the repository GPG key change. Challenge When attempting to update...
Fedora 43 : chromium (2026-44c7458a92)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-44c7458a92 advisory. Update to 146.0.7680.80 CVE-2026-3909: Out of bounds write in Ski Tenable has extracted the preceding description block directly from the Fedora...
CVE-2026-22727 - Unprotected internal endpoints | Cloud Foundry
Severity HIGH CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 7.5 Vendor CloudFoundry Foundation Versions Affected Capi Release: 1.226.0 and below CF Deployment: v5 4.9.0 and below Description An attacker with access to the Cloud Foundry internal network could potentially inject malicious code into ...
PT-2026-34930
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the as102 usb driver. When the as102 usb probe function encounters an error after successfully calling usb register dev, it may call usb deregister dev and...
PT-2026-34928
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the hackrf driver. When the hackrf probe function registers a device and subsequently encounters an error, it may free device memory using kfree while file...
Photon OS 5.0: Curl PHSA-2026-5.0-0785
An update of the curl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0785. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Linux JFS diUnmount() Heap Buffer Overflow DoS
The vulnerability of the diUnmount function in the fs/jfs/jfsimap.c module of the Linux file system is related to the repeated release of previously released memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...
Linux net/can/j1939/main.c Heap Buffer Overflow DoS
The vulnerability of the j1939netdevnotify function in the net/can/j1939/main.c module of the Linux operating system’s kernel is related to improper release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel Network File System Buffer Overflow
The vulnerability of the netfspgpriv2begincopytocache function in the fs/netfs/readpgpriv2.c module of the Linux kernel’s network file system support module is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to compromise the...
Linux DRI adv7511_remove() Buffer Overflow
The vulnerability of the adv7511remove function in the drivers/gpu/drm/bridge/adv7511/adv7511drv.c driver for the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to the assignment of pointers in a incorrect order after releasing a complex resource. Exploiting...
CVE-2026-4284
A vulnerability was determined in taoofagi easegen-admin up to 8f87936ac774065b92fb20aab55b274a6ea76433. This issue affects the function downloadFile of the file - yudao-module-digitalcourse/yudao-module-digitalcourse-biz/src/main/java/cn/iocoder/yudao/module/digitalcourse/util/PPTUtil.java of th...
GHSA-VR7J-G7JV-H5MP OpenClaw session transcript files were created without forced user-only permissions
openclaw created new session transcript JSONL files with overly broad default permissions in affected releases. On multi-user hosts, other local users or processes could read transcript contents, including secrets that might appear in tool output. Affected Packages / Versions - Package: openclaw...
Command Injection
Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Command Injection via the remote attachment staging process. An attacker can execute arbitrary commands on the configured remote host by supplying a crafted iMessage attachment filename...
CVE-2026-30876
Chamilo LMS before version 1.11.36 is vulnerable to user enumeration via login response (valid vs invalid usernames). The issue has been fixed in 1.11.36. CVSS‑4.0 metrics indicate Network attack vector, Low confidentiality impact, and a Medium overall severity (6.3).
Important: Red Hat Security Advisory: Red Hat Data Grid 8.6.0 security update
An update for Red Hat Data Grid 8 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...
IncusOS has a LUKS encryption bypass due to insufficient TPM policy
The default configuration of systemd-cryptenroll as used by IncusOS through mkosi allows for an attacker with physical access to the machine to access the encrypted data without requiring any interaction by the system's owner or any tampering of Secure Boot state or kernel UKI boot image. That's...
