36734 matches found
kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service
A flaw was found in the Linux kernel's bonding driver. A local attacker with low privileges could exploit a use-after-free vulnerability in the bondxmitbroadcast function. This occurs due to a race condition during concurrent slave enslave/release operations, which can lead to the original socket...
kernel: Linux kernel: Use-after-free in bonding driver leads to denial of service
A flaw was found in the Linux kernel's bonding driver. A local attacker with low privileges could exploit a use-after-free vulnerability in the bondxmitbroadcast function. This occurs due to a race condition during concurrent slave enslave/release operations, which can lead to the original socket...
DoS (Denial of Service) in Confluence Data Center
This High severity DoS Denial of Service vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2.0 of Confluence Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.1, allows an authenticated attacker to cause a resource...
[SECURITY] Fedora 43 Update: perl-Compress-Raw-Bzip2-2.218-1.fc43
This module provides a Perl interface to the bzip2 compression library. It is used by IO::Compress::Bzip2...
[SECURITY] Fedora 44 Update: helm-4.2.2-1.fc44
Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. Use Helm to: - Find and use popular software packaged as Helm Charts to run in Kubernetes - Share your own applications as Helm Charts - Create reproducible builds of your Kubernetes applications -...
[SECURITY] Fedora 44 Update: python-rignore-0.7.6-7.fc44
rignore is a Python module that provides a high-performance, Rust-powered file system traversal functionality. It wraps the Rust ignore crate using PyO3, offering an efficient way to walk through directories while respecting various ignore rules...
The vulnerability of the ReadSTEGANOImage() function in the ImageMagick console graphics editor’s coders/stegano.c file allows a hacker to induce a service failure.
The vulnerability of the ReadSTEGANOImage function in the ImageMagick console graphics editor’s coders/stegano.c file is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the dsa_switch_parse() function in the net/dsa/dsa.c module allows a hacker to cause a service failure in systems with a distributed kernel architecture of the Linux operating system.
The vulnerability of the dsaswitchparse function in the net/dsa/dsa.c module relates to the improper release of resources in support for Linux operating system’s distributed kernel architecture. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the WriteASHLARImage() function in the ImageMagick console graphics editor’s coders/ashlar.c file allows a hacker to cause a service failure.
The vulnerability of the WriteASHLARImage function in the ImageMagick console graphics editor’s coders/ashlar.c file is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
ROS-20260708-73-0047
The vulnerability in ImageMagick is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-56424
Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Domain versions 7.7.1.0 through 8.6 Dell PowerProtect Data Domain versions 8.6.1.0 through 8.6.1.10 Dell PowerProtect Data Domain versions 8.3.1.0 through 8.3.1.30 Dell PowerProtect Data Domain versions 7.13.1.0 through...
The vulnerability of the stratix10_svc_probe() function in the drivers/firmware/stratix10-svc.c file of the Linux kernel firmware driver allows a malicious actor to cause a service failure remotely.
The vulnerability of the stratix10svcprobe function in the drivers/firmware/stratix10-svc.c file of the Linux kernel firmware driver is related to the improper disabling or release of resources. Exploiting this vulnerability may allow a remote attacker to cause service failures...
The vulnerability of the msl.c file in the console-based image editing tool ImageMagick allows a hacker to trigger a service failure.
The vulnerability of the msl.c file in the console-based image editing tool ImageMagick is related to improper memory release. Exploiting this vulnerability can allow an attacker to cause a service failure...
Why Unity Remains the Most Popular Engine for Mobile Games
Learn why Unity is still a trusted engine for mobile games, from faster prototyping and Android and iOS support to tools that help studios scale after releases...
[SECURITY] [DSA 6382-1] postfix security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6382-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 07, 2026 https://www.debian.org/security/faq -...
kernel: sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL
A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A race condition exists in the SCTPSENDALL path where a cached list entry is not properly revalidated after the socket lock is temporarily released. This allows a local attacker or a remote attacker v...
Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.7 security update
A security update is now available for Red Hat JBoss Enterprise Application Platform 8.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
CVE-2026-55435
Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.30.0 and prior to versions 2.32.7, 2.33.8, and 2.34.2, AI Bridge proxy endpoints authenticate via Server.IsAuthorized in coderd/aibridgedserver, which validates key format, expiry, secret...
CVE-2026-55435 Suspended Coder users retain access to AI Bridge LLM proxy endpoints
Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.30.0 and prior to versions 2.32.7, 2.33.8, and 2.34.2, AI Bridge proxy endpoints authenticate via Server.IsAuthorized in coderd/aibridgedserver, which validates key format, expiry, secret...