39517 matches found
Fedora 44 : proftpd (2026-f073efe2f3)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f073efe2f3 advisory. Current upstream maintenance release, with a handful of potentially security-related bugfixes. Tenable has extracted the preceding description block directly...
PT-2026-90889
In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amdgpu: fix aperture mapping leak" devres teardown is LIFO. The aperture devres node was registered after the DRM device node, so devres release all unmaps the aperture before the DRM device release callback fires...
CVE-2026-84887: Improper Resource Shutdown or Release
A vulnerability was identified in simular-ai Agent-S up to 0.3.2. Affected by this issue is some unknown functionality of the file grounding.py of the component Model-generated GUI Action Execution Workflow. The manipulation leads to denial of service. Remote exploitation of the attack is possibl...
Linux Distros Unpatched Vulnerability : CVE-2026-65109
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - slurm-wlm - None Ubuntu Linux - Fix slurmstepd removing files outside the container spool directory when cleaning up an OCI containe, Fix...
Linux Distros Unpatched Vulnerability : CVE-2026-71380
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to cause denial of servic...
The vulnerability of the `linehandle_create()` function in the `drivers/gpio/gpiolib-cdev.c` driver for the Linux operating system’s GPIO kernel allows a attacker to cause a service failure.
The vulnerability of the linehandlecreate function in the drivers/gpio/gpiolib-cdev.c driver for the Linux kernel’s GPIO subsystem is related to improper resource release. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the amdgpu_ttm_init_on_chip() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c driver for AMD GPU cores in Linux operating systems allows a hacker to cause a service failure.
The vulnerability of the amdgputtminitonchip function in the drivers/gpu/drm/amd/amdgpu/amdgputtm.c driver for AMD GPU cores in Linux operating systems is related to improper resource release. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the cqspi_remove() function in the drivers/spi/spi-cadence-quadspi.c module of the Linux operating system’s SPI device driver allows a hacker to disclose sensitive information or cause service failures.
The vulnerability of the cqspiremove function in the drivers/spi/spi-cadence-quadspi.c module of the Linux kernel’s SPI device driver relates to premature release of resources during its operation. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause syst...
The vulnerability of the swap_writeout() function in the mm/swap_state.c module of the Linux kernel’s memory management subsystem allows a hacker to trigger a service failure.
The vulnerability of the swapwriteout function in the mm/swapstate.c module of the Linux kernel’s memory management subsystem is related to improper release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the smcr_serv_conf_first_link() function in the net/smc/af_smc.c module of the SMC protocol family in the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the smcrservconffirstlink function in the net/smc/afsmc.c module, part of the SMC protocol family in the Linux operating system’s kernel, is related to improper release of resources. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity...
The vulnerability of the do_rbd_add() function in the drivers/block/rbd.c module of the Linux kernel’s block devices driver allows a attacker to cause a service failure.
The vulnerability of the dorbdadd function in the drivers/block/rbd.c module of the Linux kernel’s block devices driver is related to the release of an incorrect pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
Important: Red Hat Security Advisory: Red Hat Developer Hub 1.10.4 release.
Red Hat Developer Hub 1.10.4 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...
GO-2026-6337 Gitea release asset dumps permit path traversal through crafted names in code.gitea.io/gitea
Gitea release asset dumps permit path traversal through crafted names in code.gitea.io/gitea...
EUVD-2026-70227
A vulnerability was found in ntegrals openbrowser up to 067fc45d649baa961750da8e2f4a75d87c5c75c8. Affected by this vulnerability is an unknown functionality of the file packages/core/src/agent/agent.ts of the component Browser Agent Message Construction. Performing a manipulation results in...
CVE-2026-20278 Cisco IOS XR Software Security Hardening Release: September 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. Th...
EUVD-2026-70207
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. Th...
CVE-2026-20280 Cisco IOS XR Software Security Hardening Release: September 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. Th...
CVE-2026-20280
CVE-2026-20280 is a Cisco IOS XR Software security hardening release (September 2026) addressing multiple internally discovered vulnerabilities classified under CWE-703 (improper checking or handling of exceptional conditions). The weaknesses are reachable over the network with low privileges and...
EUVD-2026-70206
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. Th...