11703 matches found
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005429)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005429 advisory. In the Linux kernel, the following vulnerability has been resolved: mm: revert mm: shmem: fix data-race in shmemgetattr Revert d949d1d14fa2 mm: shmem: fix data-race ...
PT-2026-26383
Summary A client authenticated with a shared gateway token could connect as role=node without device identity/pairing, then call node.event to trigger agent.request and voice.transcript flows. Affected Packages / Versions - Package: npm openclaw - Affected versions: = 2026.2.21-2 - Patched versio...
OliveTin has unauthenticated DoS via concurrent map writes in OAuth2 state handling
Summary An unauthenticated denial-of-service vulnerability exists in OliveTin’s OAuth2 login flow. Concurrent requests to /oauth/login can trigger unsynchronized access to a shared registeredStates map, causing a Go runtime panic fatal error: concurrent map writes and process termination. This...
GHSA-MPP2-X7WV-38HV NocoDB has Plaintext Storage of Shared View Passwords
Summary Shared view passwords were stored in plaintext in the database and compared using direct string equality. Details The password column in ncviews stored unhashed passwords. Verification used !== comparison across public-datas.service.ts, public-metas.service.ts, and...
NocoDB has Plaintext Storage of Shared View Passwords
Summary Shared view passwords were stored in plaintext in the database and compared using direct string equality. Details The password column in ncviews stored unhashed passwords. Verification used !== comparison across public-datas.service.ts, public-metas.service.ts, and...
CVE-2026-28360
NocoDB is software for building databases as spreadsheets. Prior to version 0.301.3, shared view passwords were stored in plaintext in the database and compared using direct string equality. This issue has been patched in version 0.301.3...
CVE-2025-47386
Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs...
CVE-2025-47381
Memory Corruption while processing IOCTL calls when concurrent access to shared buffer occurs...
CVE-2025-47379
Memory Corruption when concurrent access to shared buffer occurs due to improper synchronization between assignment and deallocation of buffer resources...
CVE-2025-47378
Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain...
CVE-2025-47376
Memory Corruption when concurrent access to shared buffer occurs during IOCTL calls...
CVE-2025-47386
CVE-2025-47386 affects automotive audio (per CVE listing) with memory corruption arising during IOCTL handling under concurrent access to a shared buffer. The connected CVE record notes a Use After Free root cause. Exploitation details are not provided in the available documents. No explicit reme...
CVE-2025-47386 Use After Free in Automotive Audio
Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs...
CVE-2025-47386
Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs...
EUVD-2025-208193
Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs...
CVE-2025-47386 Use After Free in Automotive Audio
Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs...
CVE-2025-47381
CVE-2025-47381 corresponds to a memory corruption issue that occurs while processing IOCTL calls when there is concurrent access to a shared buffer. The CVSS 3.1 vector indicates a HIGH impact on confidentiality, integrity, and availability, with LOCAL attack vector, LOW attack complexity, LOW pr...
CVE-2025-47381 Use After Free in Automotive Audio
Memory Corruption while processing IOCTL calls when concurrent access to shared buffer occurs...