373655 matches found
USN-8920-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Ethernet bonding driver; - Network drivers; - F2FS file system; - Network file system NFS server daemon; - Tracing...
USN-8922-1 linux-oracle vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - S390 architecture; - IIO ADC drivers; - Multiple devices driver; - PCI subsystem; - VFIO drivers; - Network file...
USN-8922-1: Linux kernel (Oracle) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - S390 architecture; - IIO ADC drivers; - Multiple devices driver; - PCI subsystem; - VFIO drivers; - Network file...
CVE-2026-90324
A flaw was found in the ublk component of the Linux kernel. A local attacker, by providing an invalid address range from a userspace ublk server, could cause the importubuf function to fail. This failure, if not properly handled, leads to an uninitialized data structure being used in subsequent...
CVE-2026-77375
The open-source file transfer solution SFTPGo is vulnerable to a Denial of Service (DoS) condition in versions prior to 2.7.5 . An authenticated SSH user can trigger an unhandled error by sending a malformed protocol message while opening a channel. This flaw causes the server process to terminat...
CVE-2026-90164
A flaw was found in the Linux kernel's ksmbd server component. During the server's initialization process, an error in setting up internal process entries or counters is not handled correctly. This oversight can result in the system attempting to access a null pointer, which may lead to a system...
CVE-2026-90152
A flaw was found in the smb/server component of the Linux kernel. A session leak in the ksmbdsessionregister function occurs when a session fails to be stored, leading to its reference count not being properly decremented. This can result in resource exhaustion, potentially allowing a remote...
CVE-2026-9218 Insufficient input validation vulnerability in Certain NETGEAR routers allows unauthorized access
Insufficient input validation vulnerability in time server NTP setting of the listed NETGEAR models allows an attacker who is connected to the router’s local network and has the router’s administrator credentials to run unauthorized commands on the router. This vulnerability could impact the...
CVE-2026-93907
IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a flaw in the CSIv2 inbound propagation handler...
CVE-2026-95680
IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the cell...
CVE-2026-109954
Parse Server 5.4.0 before 8.6.96 and 9.0.0 before 9.10.2-alpha.5 shares transactional batch state across concurrent requests, letting any client's transactional batch request interfere with other clients' database writes. On PostgreSQL or MongoDB replica sets and sharded clusters, other clients'...
DEBIAN-CVE-2026-109939
FreeRDP 3.27.1 before 3.32.0 contains a NULL pointer dereference in updatereadcachebitmapv3order in libfreerdp/core/orders.c, which accesses the client bitmap cache when the CBR3DONOTCACHE flag is set, even though the cache is not yet initialized before Demand Active. A malicious or compromised R...
CVE-2026-109939
FreeRDP 3.27.1 before 3.32.0 contains a NULL pointer dereference in updatereadcachebitmapv3order in libfreerdp/core/orders.c, which accesses the client bitmap cache when the CBR3DONOTCACHE flag is set, even though the cache is not yet initialized before Demand Active. A malicious or compromised R...
Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network...
Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...
Microsoft Exchange Server Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network...
Windows Domain Name Service Remote Code Execution Vulnerability
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...
Windows Domain Name Service Remote Code Execution Vulnerability
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...