79774 matches found
CVE-2026-65108
NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd process while the slurmstepd is running with root permissions...
CVE-2026-119675 mongorestore may bypass collection guards through a system.buckets prefix
MongoDB Database Tools mongorestore inconsistently handles the system.buckets. prefix when validating collection names in an untrusted dump. A specially crafted collection name can bypass special-collection guards and operator namespace filters, causing a restore to create an unauthorized...
CVE-2026-119675
The mongorestore utility in MongoDB Database Tools (versions 100.4.0 through before 100.20.1) inconsistently handles the system.buckets. prefix during collection name validation in untrusted dumps. This allows a specially crafted collection name to bypass special-collection guards and operator na...
CVE-2026-119675 mongorestore may bypass collection guards through a system.buckets prefix
MongoDB Database Tools mongorestore inconsistently handles the system.buckets. prefix when validating collection names in an untrusted dump. A specially crafted collection name can bypass special-collection guards and operator namespace filters, causing a restore to create an unauthorized...
Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access
Barracuda has disclosed details of two vulnerabilities affecting its products that, if chained together, could allow an attacker to bypass authorization controls and gain root access to a susceptible device. The vulnerabilities, a pre-authentication authorization bypass vulnerability and a comman...
CVE-2026-65108
NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd process while the slurmstepd is running with root permissions...
CVE-2026-65108
NVIDIA Slurm (Slurm Workload Manager) contains a heap-based buffer overflow (also described in some sources as a stack overflow ) in the slurmstepd process. The vulnerability is triggered when a job environment contains an oversized SPANK option variable while the process is running with root per...
EUVD-2026-115910
NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd process while the slurmstepd is running with root permissions...
CVE-2026-121428
AzuraCast through 0.23.8 contains a remote code execution vulnerability that allows authenticated station managers to inject Supervisor configuration through the station timezone field. Attackers can submit a timezone containing newlines to the profile edit API, defining a new Supervisor program...
ROOT-OS-ALPINE-321-CVE-2026-1642 CVE-2026-1642 in nginx - Patched by Root
Root has patched CVE-2026-1642 in the nginx package for Root:Alpine:3.21. Multiple fixed versions available...
ROOT-OS-ALPINE-321-CVE-2026-32647 CVE-2026-32647 in nginx - Patched by Root
Root has patched CVE-2026-32647 in the nginx package for Root:Alpine:3.21. Multiple fixed versions available...
ROOT-OS-ALPINE-321-CVE-2026-27651 CVE-2026-27651 in nginx - Patched by Root
Root has patched CVE-2026-27651 in the nginx package for Root:Alpine:3.21. Multiple fixed versions available...
CVE-2026-121428
AzuraCast versions through 0.23.8 are vulnerable to Remote Code Execution (RCE) due to a Supervisor configuration injection flaw in the station timezone field. Authenticated station managers can exploit the profile edit API by submitting a timezone string containing newlines. This allows the inje...
EUVD-2026-115960
AzuraCast through 0.23.8 contains a remote code execution vulnerability that allows authenticated station managers to inject Supervisor configuration through the station timezone field. Attackers can submit a timezone containing newlines to the profile edit API, defining a new Supervisor program...
Mautic: RCE
An unrestricted file upload vulnerability exists in the campaign import feature of Mautic 7. When processing an uploaded campaign archive, the application copies the bundled asset files into a publicly accessible media directory without restricting their file names or types. An authenticated user...
ROOT-OS-DEBIAN-13-CVE-2026-6238 CVE-2026-6238 in glibc - Patched by Root
Root has patched CVE-2026-6238 in the glibc package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-5435 CVE-2026-5435 in glibc - Patched by Root
Root has patched CVE-2026-5435 in the glibc package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2019-9192 CVE-2019-9192 in glibc - Patched by Root
Root has patched CVE-2019-9192 in the glibc package for Root:Debian:13. Multiple fixed versions available...