11391 matches found
CVE-2026-73654 Trigger.dev: Prototype pollution via run metadata operations → process-wide cross-tenant DoS
Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. From 3.3.8 until 4.5.6, the PUT /api/v1/runs/:runId/metadata endpoint passes attacker-controlled operation.key values to new JSONHeroPathoperation.key.setnewMetadata, value in...
Malicious code in shared-slot-gate (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 567d0e00a8f67763d2490a1c3bcd2e806e5c02eed7b87c5ba7c082d779d7243e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
MAL-2026-14011 Malicious code in shared-slot-gate (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 567d0e00a8f67763d2490a1c3bcd2e806e5c02eed7b87c5ba7c082d779d7243e The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
NPM: ep_etherpad-lite: Import/export uses Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite
NPM: epetherpad-lite: Import/export uses Math.random for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite vulnerability discovered by ? in WordPress Npm epetherpad-lite versions = 3.0.0...
CVE-2025-52640
HCL AION is affected by a vulnerability where the shared storage used by product components is architected without sufficient access separation. Processes sharing the storage may be able to access or modify files beyond their intended scope, potentially resulting in unintended behavior or securit...
CVE-2025-52640 HCL AION is affected by multiple security vulnerabilities.
HCL AION is affected by a vulnerability where the shared storage used by product components is architected without sufficient access separation. Processes sharing the storage may be able to access or modify files beyond their intended scope, potentially resulting in unintended behavior or securit...
CVE-2025-52640
CVE-2025-52640 – AION: The vulnerability affects HCL AION where the shared storage used by product components is architected with insufficient access separation. As a result, processes sharing the storage may access or modify files beyond their intended scope, potentially causing unintended behav...
EUVD-2025-210722
HCL AION is affected by a vulnerability where the shared storage used by product components is architected without sufficient access separation. Processes sharing the storage may be able to access or modify files beyond their intended scope, potentially resulting in unintended behavior or securit...
ROS-20260813-73-0046
The vulnerability in freerdp3 is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the f2fs component of the Linux operating system’s kernel, which allows a hacker to cause a service failure
The vulnerability of the f2fs component of the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-18749
The CVE-2026-18749 issue is a logic flaw in the track branch: authorization is performed via is_my_case(t_attach.case) and does not verify VinceTrackAttachment.shared. As a result, a coordinator-uploaded case artefact that has not been marked as shared remains retrievable by any case member who p...
CVE-2026-73263 Prowler: RCE on Prowler App workers via kubeconfig auth-provider cmd-path
Prowler is a cloud security platform. Prior to 5.36.0, the Kubernetes provider connection test accepted kubeconfigcontent containing a legacy gcp auth-provider with config.cmd-path and config.cmd-args because kubeconfigcontainsexecauth in api/src/backend/api/v1/serializers.py checked only exec...
kernel: xen: AMD Zen 2 Processors: Privilege escalation via improper CPU cache isolation
A flaw was found in AMD Zen 2-based processors, affecting components such as the kernel and Xen hypervisor. Improper isolation of shared resources within the CPU operation cache could allow an attacker to corrupt instructions executed at a different privilege level. This could potentially result ...
The vulnerability of the ksmbd component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the ksmbd component in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the kernel/futex component of the Linux operating system, which allows a hacker to gain access to confidential data
The vulnerability of the kernel/futex component in the Linux operating system is related to insufficient checking of the state of the shared resource. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
The vulnerability in the driver/scsi/smartpqi/smartpqi_init.c component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the driver/scsi/smartpqi/smartpqiinit.c component of the Linux operating system’s kernel is related to insufficient checking of the status of the shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
Debian dla-4735 : neutron-api - security update
The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4735 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4735-1 [email protected] https://www.debian.org/lts/security/...
Unchecked Return Value
Overview Affected versions of this package are vulnerable to Unchecked Return Value due to improper access control in the diagnostics IPC. An attacker can gain elevated privileges by exploiting a missing error check that results in incorrect access control lists being applied to shared resources...