75 matches found
CVE-2023-3350
CVE-2023-3349 / CVE-2023-3350 | IBERMATICA RPS 2019 IBERMATICA RPS 2019 의 인증되지 않은 정보 노출과 암호화 설계 결함을 문서화한 보안 연구입니다. 이 취약점들은 서로 연결되어 악용될 수 있으며, 인증 관련 SQL 쿼리가 포함된 애플리케이션 로그를 노출시키고 역변환 가능한 AES-CBC 암호문에서 사용자 비밀번호를 복구할 수 있습니다. 면책 조항 이 저장소는 보안 연구, 방어적 검증 및 교육 목적으로만 제공됩니다. 소유한 시스템 또는 명시적으로 평가가 승인된 시스템에서만...
CVE-2026-89873
In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC EXT SPS RPS counts The HEVC SPS control carries the short-term and long-term RPS counts that decoder drivers use to walk the matching EXT SPS dynamic arrays. Reject SPS values that exceed the HEVC...
CVE-2026-89873 media: v4l2-ctrls: validate HEVC EXT SPS RPS counts
In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC EXT SPS RPS counts The HEVC SPS control carries the short-term and long-term RPS counts that decoder drivers use to walk the matching EXT SPS dynamic arrays. Reject SPS values that exceed the HEVC...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: Networks: Do not pass flowid to setrpscpu. The responsible commit made the assumption that the RPS table for each receive queue would have the same size, and that it would not change. When computing flowid in setrpscpu, do not...
SUSE CVE-2026-43208
In the Linux kernel, the following vulnerability has been resolved: net: do not pass flowid to setrpscpu Blamed commit made the assumption that the RPS table for each receive queue would have the same size, and that it would not change. Compute flowid in setrpscpu, do not assume we can use the...
Linux Distros Unpatched Vulnerability : CVE-2026-43208
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: do not pass flowid to setrpscpu Blamed commit made the assumption that the RPS table fo...
EUVD-2026-27771
In the Linux kernel, the following vulnerability has been resolved: net: do not pass flowid to setrpscpu Blamed commit made the assumption that the RPS table for each receive queue would have the same size, and that it would not change. Compute flowid in setrpscpu, do not assume we can use the...
CVE-2026-43208
In the Linux kernel, the following vulnerability has been resolved: net: do not pass flowid to setrpscpu Blamed commit made the assumption that the RPS table for each receive queue would have the same size, and that it would not change. Compute flowid in setrpscpu, do not assume we can use the...
CVE-2026-43208
The CVE-2026-43208 entry describes a Linux kernel networking vulnerability where an incorrect assumption about the Receive Packet Steering (RPS) table size/immutability leads to out-of-bounds access when computing the flow_id in set_rps_cpu(). The fix requires computing flow_id within set_rps_cpu...
CVE-2026-43208 net: do not pass flow_id to set_rps_cpu()
In the Linux kernel, the following vulnerability has been resolved: net: do not pass flowid to setrpscpu Blamed commit made the assumption that the RPS table for each receive queue would have the same size, and that it would not change. Compute flowid in setrpscpu, do not assume we can use the...
CVE-2026-43208
In the Linux kernel, the following vulnerability has been resolved: net: do not pass flowid to setrpscpu Blamed commit made the assumption that the RPS table for each receive queue would have the same size, and that it would not change. Compute flowid in setrpscpu, do not assume we can use the...
PT-2026-37548
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the set rps cpu function incorrectly assumes that the Receive Packet Steering RPS table for each receive queue is of a constant size and does not change. By passing...
CVE-2026-39639 WordPress RPS Include Content plugin <= 1.2.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in redpixelstudios RPS Include Content rps-include-content allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RPS Include Content: from n/a through = 1.2.2...
CVE-2026-39639 WordPress RPS Include Content plugin <= 1.2.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in redpixelstudios RPS Include Content rps-include-content allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RPS Include Content: from n/a through = 1.2.2...
CVE-2026-39639
Missing Authorization vulnerability in redpixelstudios RPS Include Content rps-include-content allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RPS Include Content: from n/a through = 1.2.2...
CVE-2026-39639
CVE-2026-39639 affects the WordPress plugin RPS Include Content by redpixelstudios. The vulnerability is described as a Missing Authorization issue due to incorrectly configured access control in rps-include-content , affecting versions up to and including 1.2.2. The base score is 6.5 (Medium) wi...
WordPress plugin RPS Include Content 安全漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...
MAL-2026-2371 Malicious code in merchant-rps (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e16d7a1d2277acd9102268accb99bf0054cf39ee5141d0380f920fedcc8e59 The package merchant-rps was found to contain malicious code...
Malicious code in merchant-rps (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3e16d7a1d2277acd9102268accb99bf0054cf39ee5141d0380f920fedcc8e59 The package merchant-rps was found to contain malicious code...