Mellanox Ethernet Network Adapter Driver Heap Buffer Overflow DoS

The vulnerability of the mlx5enicinit function in the drivers/net/ethernet/mellanox/mlx5/core/enmain.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an...

CVE-2026-56092: Missing Authorization

The extension forces empty frontend-group and subpage-inheritance restrictions onto page records during indexer sub-requests, and this forged state was persisted into the shared rootline cache, allowing anonymous visitors to bypass extendToSubpages-inherited access restrictions on cached pages...

FreeBSD Security Advisory - FreeBSD-SA-26:63.posixshm

FreeBSD Security Advisory - The FIOSSHMLPGCNF ioctl2 operation configures the page size for a largepage shared memory object. This is intended to be used immediately after creating the object, before any memory is allocated for the object. The handler checked whether a page size had already been...

PT-2026-82030

Mattermost doesn't sanitize FileInfo.Name received from federated peers during shared channel file sync in github.com/mattermost/mattermost-server...

FreeBSD -- TOCTOU race in POSIX shared memory large page configuration

Problem Description: The FIOSSHMLPGCNF ioctl2 operation configures the page size for a largepage shared memory object. This is intended to be used immediately after creating the object, before any memory is allocated for the object. The handler checked whether a page size had already been...

PT-2026-81937

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A race condition exists in the FIOSSHMLPGCNF ioctl2 operation used to configure the page size for a largepage shared memory object. The handler fails to hold the...

qla2xxx SCSI Driver Heap Buffer Overflow DoS

The vulnerability of the qltfreesessiondone function in the drivers/scsi/qla2xxx/qlatarget.c driver for Linux SCSI device drivers is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected...

Linux USB Device Driver Heap Buffer Overflow DoS

The vulnerability of the gadgetunbinddriver function in the drivers/usb/gadget/udc/core.c file of the Linux USB device driver module is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

Malicious code in @medisend/shared (npm)

Source: amazon-inspector cb5857b17f9935d83581e1a24e6d990211fe86631143c7025c3123d1274e7d28 package.json declares a postinstall lifecycle script that runs curl at install time and transmits the installer's hostname via $hostname as a query parameter to a webhook.site collector. The receiver ID in t...

Malicious code in @medisend/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5857b17f9935d83581e1a24e6d990211fe86631143c7025c3123d1274e7d28 package.json declares a postinstall lifecycle script that runs curl at install time and transmits the installer's hostname via $hostname as a query...

MAL-2026-14423 Malicious code in @medisend/shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb5857b17f9935d83581e1a24e6d990211fe86631143c7025c3123d1274e7d28 package.json declares a postinstall lifecycle script that runs curl at install time and transmits the installer's hostname via $hostname as a query...

Malware in sme-scripts-shared-library-webpack-plugin

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in sme-rko-finance-front-shared-entity-groups-models

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in shopping-shared-atom-mobile-cart-counter

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2026-78269

Contributor Server Side Request Forgery SSRF in Shared Files = 1.7.69 versions...

CVE-2026-78269

CVE-2026-78269 is a Server Side Request Forgery (SSRF) vulnerability in the WordPress Shared Files plugin (versions

CVE-2026-78269 WordPress Shared Files plugin <= 1.7.69 - Server Side Request Forgery (SSRF) vulnerability

Contributor Server Side Request Forgery SSRF in Shared Files = 1.7.69 versions...

CVE-2026-78269 WordPress Shared Files plugin <= 1.7.69 - Server Side Request Forgery (SSRF) vulnerability

Contributor Server Side Request Forgery SSRF in Shared Files = 1.7.69 versions...

EUVD-2026-64834

Contributor Server Side Request Forgery SSRF in Shared Files = 1.7.69 versions...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Ensure that objs is not NULL in virtiogpuarrayputfree. If virtiogpuobjectshmeminit fails e.g., due to fault injection, as happened in the bug report by syzbot, virtiogpuarrayputfree might be called with objs being NUL...