48770 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-79285
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML...
MiracleLinux 8 : java-1.8.0-openjdk-1.8.0.504.b01-1.1.el8 (AXSA:2026-1656:16)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1656:16 advisory. JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Enhance TLS server CVE-2026-70907 Tenable has...
Linux Distros Unpatched Vulnerability : CVE-2026-79068
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper resource exposure in StreamsAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy into a...
The vulnerability of the evbuffer_add_buffer_reference() function in the Libevent event-driven library allows a attacker to cause a service failure.
The vulnerability of the evbufferaddbufferreference function in the Libevent event-driven library is related to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux Distros Unpatched Vulnerability : CVE-2026-79269
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML pag...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098811)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098811 advisory. In the Linux kernel, the following vulnerability has been resolved: xfrm: always flush state and policy upon NETDEVUNREGISTER event syzbot is reporting that struct...
Linux Distros Unpatched Vulnerability : CVE-2026-79118
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: iperf3 (UTSA-2026-104808)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104808 advisory. A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control- channel JSON with oversized numeric parameters, such as...
Linux Distros Unpatched Vulnerability : CVE-2026-78958
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain...
Linux Distros Unpatched Vulnerability : CVE-2026-68763
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is reset This issue affects...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098873)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098873 advisory. In the Linux kernel, the following vulnerability has been resolved: i40e: fix validation of VF state in get resources VF state I40EVFSTATEACTIVE is not the only stat...
MiracleLinux 8 : java-17-openjdk-17.0.20.1.1-1.1.el8 (AXSA:2026-1669:15)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1669:15 advisory. JDK: Improve Resource Resolving CVE-2026-60589 JDK: Enhance HTTP Connections CVE-2026-61308 JDK: Enhance TLS server CVE-2026-70907 Tenable has...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-099004)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099004 advisory. In the Linux kernel, the following vulnerability has been resolved: tracepoint: balance regfunc on funcadd failure in tracepointaddfunc When a tracepoint goes throug...
Linux Distros Unpatched Vulnerability : CVE-2026-78965
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium...
Linux Distros Unpatched Vulnerability : CVE-2026-78984
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially read...
The vulnerability of the dt2815_attach() function in the drivers/comedi/drivers/dt2815.c module, which supports Linux kernel-based data collection devices, allows a hacker to trigger a service failure.
The vulnerability of the dt2815attach function in the drivers/comedi/drivers/dt2815.c module, which supports Linux kernel-based data collection devices, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to cause service...
The vulnerability of the mlx5e_skb_from_cqe_mpwrq_nonlinear() function in the drivers/net/ethernet/mellanox/mlx5/core/en_rx.c driver of the Mellanox Ethernet network adapter for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the mlx5eskbfromcqempwrqnonlinear function in the drivers/net/ethernet/mellanox/mlx5/core/enrx.c file of the Ethernet Mellanox network adapter driver in the Linux operating system is related to errors in resource counters. Exploiting this vulnerability could allow an attacker...
The vulnerability of the edac_mc_alloc() function in the drivers/edac/edac_mc.c module of the EDAC (Error Detection and Correction) kernel driver for the Linux operating system allows a malicious actor to cause a service failure.
The vulnerability of the edacmcalloc function in the drivers/edac/edacmc.c module of the EDAC driver for the Linux operating system involves the allocation of resources without any restrictions or regulation. Exploiting this vulnerability can allow a perpetrator to cause service failures...
Linux Distros Unpatched Vulnerability : CVE-2026-78969
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in Video in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page...
CVE-2026-80189 LeafWiki 0.10.0 through 0.12.0 Uncontrolled Resource Consumption via Unbounded ZIP Extraction
LeafWiki extracts an uploaded ZIP archive without limiting how much data it will write. ZipExtractor.ExtractToDir in internal/importer/zipextractor.go opens each entry and copies it to the destination with io.Copy, which runs to the end of the decompressed stream, so only the size of the uploaded...