79096 matches found
ROOT-OS-DEBIAN-12-CVE-2024-23337 CVE-2024-23337 in jq - Patched by Root
Root has patched CVE-2024-23337 in the jq package for Root:Debian:12. Multiple fixed versions available...
Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers
A flaw in Broadcom's Wi-Fi setup software lets an attacker within radio range run code as root on Broadcom-based routers, without the network password or any pairing step, security researcher Quentin Kaiser disclosed on October 16. He showed the attack working against home gateways supplied by...
CVE-2026-16487
Rejected reason: Red Hat Product Security has determined that this is not a vulnerability in bootc or containers-common. bootc fetches images under /etc/containers/policy.json. The shipped default is insecureAcceptAnything for registries without an explicit signature requirement; registry.redhat....
CVE-2026-16487
A flaw was found in bootc when operating with the default containers signature policy. Automatic or manual upgrades of a mutable image tag may apply unsigned content for registries that fall through to insecureAcceptAnything, allowing an attacker who can update that tag to execute arbitrary OS...
EUVD-2026-104078
A flaw was found in bootc when operating with the default containers signature policy. Automatic or manual upgrades of a mutable image tag may apply unsigned content for registries that fall through to insecureAcceptAnything, allowing an attacker who can update that tag to execute arbitrary OS...
CVE-2026-16487
A flaw exists in bootc when utilizing the default containers signature policy. During automatic or manual upgrades of a mutable image tag , the system may apply unsigned content for registries falling through to insecureAcceptAnything . This allows an attacker capable of updating that tag to exec...
ROOT-APP-NPM-GHSA-W2VW-W76X-QR89 GHSA-w2vw-w76x-qr89 in nx - Patched by Root
Root has patched GHSA-w2vw-w76x-qr89 in the nx package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-938696 AIKIDO-2026-938696 in tinypool - Patched by Root
Root has patched AIKIDO-2026-938696 in the tinypool package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2026-396404 AIKIDO-2026-396404 in tinypool - Patched by Root
Root has patched AIKIDO-2026-396404 in the tinypool package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-GHSA-F88M-G3JW-G9CJ GHSA-f88m-g3jw-g9cj in sharp - Patched by Root
Root has patched GHSA-f88m-g3jw-g9cj in the sharp package for Root:npm. Multiple fixed versions available...
PT-2026-117234
Name of the Vulnerable Software and Affected Versions bootc affected versions not specified Description An issue exists when using the default containers signature policy. During automatic or manual upgrades of a mutable image tag, unsigned content may be applied for registries that fall through ...
PT-2026-117372
A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc. The service runs as root and operates on a file inside a directory owned by an unprivileged system user without verifying that the file is not a symbolic link. A local attacker who has already compromised the...
Linux Distros Unpatched Vulnerability : CVE-2026-16487
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in bootc when operating with the default containers signature policy. Automatic or manual upgrades of a mutable image tag may apply unsigned...
Linux Distros Unpatched Vulnerability : CVE-2026-112210
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc. The service runs as root and operates on a file inside a directory owned by a...
CVE-2026-112210: Improper Link Resolution Before File Access
A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc. The service runs as root and operates on a file inside a directory owned by an unprivileged system user without verifying that the file is not a symbolic link. A local attacker who has already compromised the...
UBUNTU-CVE-2026-98447
In the Linux kernel, the following vulnerability has been resolved: xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots LOLLM noticed that the inode btree root formatting methods copy too many bytes -- there's only one set of keys in node blocks, not two. This causes memory...
PT-2026-120336
Affected versions include emSign ECC Root CA - G3, which can allow certificate paths through distrusted emSign intermediates. Affected versions may accept certificate paths containing distrusted emSign intermediate public keys. The private keys corresponding to these intermediates are now well...
PT-2026-120338
Affected versions include emSign ECC Root CA - G3, which can allow certificate paths through distrusted emSign intermediates. Affected versions may accept certificate paths containing distrusted emSign intermediate public keys. The private keys corresponding to these intermediates are now well...
CVE-2026-105810: Stack-based Buffer Overflow
Tapo C320WS V2.0 contains an authenticated stack-based buffer overflow in the local onboarding Wi-Fi configuration path. An authenticated attacker on the adjacent network can submit a crafted request containing an oversized encrypted password field, overwrite stack state, and execute commands wit...