5785 matches found
BIT-GHOST-2026-70591 Ghost: Server-Side Request Forgery in Image Fetching
Ghost is a Node.js content management system. From 0.10.0 until 6.54.1, a Server-Side Request Forgery in Ghost Admin image fetching allowed any staff-level user to perform a blind HTTP GET request against internal hosts. No output was returned, but this could have been used to probe open ports on...
9Router: Authenticated Server-Side Request Forgery (SSRF) via OIDC Provider Test Endpoint
A Server-Side Request Forgery SSRF vulnerability exists in the 9Router dashboard via the /api/auth/oidc/test endpoint. The application accepts a user-controlled URL string through the issuerUrl parameter and performs an outbound HTTP request without validating if the destination IP belongs to a...
PT-2026-76735
Name of the Vulnerable Software and Affected Versions sqlparse versions prior to 0.6.0 Description sqlparse contains a Regular Expression Denial of Service ReDoS issue where the lexer repeatedly scans unmatched dollar-quoted literals and multiline-comment delimiters. This occurs because the regex...
MINI-2493-G63V-4885
Bulletin has no description...
CVE-2026-74411
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: Correct data type for scan index to avoid infinite loop A kernel soft lockup was observed during Wi-Fi scanning on the 6GHz band. The CPU becomes stuck in rtw89hwscanaddchanax for over 20 seconds, leading to a system...
CVE-2026-68469
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix permanently busy scans after multiple roam iterations In order for the firmware to sleep, the driver has to confirm a previously received sleep request. The normal sequence of evets goes like this: EVENTSLEEP -...
UBUNTU-CVE-2026-68469
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix permanently busy scans after multiple roam iterations In order for the firmware to sleep, the driver has to confirm a previously received sleep request. The normal sequence of evets goes like this: EVENTSLEEP -...
CVE-2026-74411
The CVE affects the Linux kernel with the wifi driver rtw89 (rtw89_core). The vulnerability arises in the 6 GHz scan path where the 6GHz channel-list scan loop uses an incorrect data type for the scan index, leading to an infinite/long loop and a soft lockup (CPU stuck for ~26s) during wifi scans...
EUVD-2026-59558
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: Correct data type for scan index to avoid infinite loop A kernel soft lockup was observed during Wi-Fi scanning on the 6GHz band. The CPU becomes stuck in rtw89hwscanaddchanax for over 20 seconds, leading to a system...
CVE-2026-68469
The CVE describes a Linux kernel wifi mwifiex driver issue where a sleep confirmation could be skipped due to ps_state being set to AWAKE during the association response, causing a forced wake and preventing a deferred sleep-confirm from being sent. This led to a permanently busy scans condition:...
CVE-2026-68469 wifi: mwifiex: fix permanently busy scans after multiple roam iterations
In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix permanently busy scans after multiple roam iterations In order for the firmware to sleep, the driver has to confirm a previously received sleep request. The normal sequence of evets goes like this: EVENTSLEEP -...
GHSA-76P8-FHRM-VPC7 vulnerabilities
Vulnerabilities for packages: longhorn-cli-fips, crossplane-provider-aws-redshift, gitlab-runner-fips, athenz-csi-driver, crossplane-provider-azure-powerbidedicated, longhorn-backing-image-manager, teleport-operator-fips, buildkite-agent, wave, kiam, external-secrets-operator,...
GHSA-XC2P-8GGW-6CR5 vulnerabilities
Vulnerabilities for packages: loki, nri-redis, kine, php-fpmexporter, rancher-webhook, cadvisor, infinispan-operator, terraform-provider-tls, sonobuoy, victoriametrics, redis-operator, cloud-sql-proxy, kubescape-operator, mountpoint-s3-csi-driver, steampipe, gitness, crossplane-provider-family-aw...
SUSE CVE-2026-68373
In the Linux kernel, the following vulnerability has been resolved: wifi: at76c50x-usb: avoid length underflow in at76guessfreq at76guessfreq checks only that the received frame is at least a bare 802.11 header 24 bytes before subtracting the fixed management-body offset: len -= eloff; For both...
GO-2025-4043 vulnerabilities
Vulnerabilities for packages: neuvector-scanner-fips, neuvector-scanner...
GO-2025-3917 vulnerabilities
Vulnerabilities for packages: neuvector-scanner-fips, neuvector-scanner...
GO-2024-2490 vulnerabilities
Vulnerabilities for packages: wolfictl, kubescape, syft, grype, zarf, k9s...
GO-2024-2912 vulnerabilities
Vulnerabilities for packages: dive...