CVE-2026-20828

Out-of-bounds read in Windows Internet Connection Sharing ICS allows an unauthorized attacker to disclose information with a physical attack...

CVE-2026-20921

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SMB Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-0717

The LottieFiles – Lottie block for Gutenberg plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.0 via the /wp-json/lottiefiles/v1/settings/ REST API endpoint. This makes it possible for unauthenticated attackers to retrieve the site...

MiracleLinux 4 : kdenetwork-4.3.4-11.AXS4.1 (AXSA:2011-169:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2011-169:01 advisory. Networking applications, including: kget: downloader manager kopete: chat client kppp: dialer and front end for pppd krdc: a client for Desktop Sharing and...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001759)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001759 advisory. Linux disk/nic frontends data leaks This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE...

CVE-2026-20919

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SMB Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-20828

Out-of-bounds read in Windows Internet Connection Sharing ICS allows an unauthorized attacker to disclose information with a physical attack...

CVE-2026-20828

Out-of-bounds read in Windows Internet Connection Sharing ICS allows an unauthorized attacker to disclose information with a physical attack...

K000159078: Podman vulnerability CVE-2024-3056

Security Advisory Description A flaw was found in Podman. This issue may allow an attacker to create a specially crafted container that, when configured to share the same IPC with at least one other container, can create a large number of IPC resources in /dev/shm. The malicious container will...

CVE-2026-20828

Out-of-bounds read in Windows Internet Connection Sharing ICS allows an unauthorized attacker to disclose information with a physical attack...

Windows rndismp6.sys Information Disclosure Vulnerability

Out-of-bounds read in Windows Internet Connection Sharing ICS allows an unauthorized attacker to disclose information with a physical attack...

CVE-2025-55462

A CORS misconfiguration in Eramba Community and Enterprise Editions v3.26.0 allows an attacker-controlled Origin header to be reflected in the Access-Control-Allow-Origin response along with Access-Control-Allow-Credentials: true. This permits malicious third-party websites to perform authenticat...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Check the untrusted offset in FF-A memory share. Verify the offset to prevent OOB access in the hypervisor. The FF-A buffer contains a value that is too large and potentially untrusted. U32MAX – sizeofstruct...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/atom: Check kcalloc for the WS buffer in amdgpuatomexecutetablelocked. kcalloc may fail. When WS is non-zero and allocation fails, ectx.ws remains NULL while ectx.wssize is set. This can lead to a potential NULL pointe...

Eramba Community和Eramba Enterprise 安全漏洞

Eramba Community and Eramba Enterprise are both a compliance management software from Eramba UK. A security vulnerability exists in Eramba Community and Eramba Enterprise version 3.26.0 that stems from a CORS misconfiguration and could lead to session hijacking and data exfiltration...

PT-2026-2678

Name of the Vulnerable Software and Affected Versions Windows Internet Connection Sharing ICS affected versions not specified Description An out-of-bounds read issue exists in Windows Internet Connection Sharing ICS. This flaw could allow an attacker to disclose information. Physical access is...

EUVD-2026-2003

Lychee is a free, open-source photo-management tool. Prior to 7.1.0, an authorization vulnerability exists in Lychee's album password unlock functionality that allows users to gain possibly unauthorized access to other users' password-protected albums. When a user unlocks a password-protected...

CVE-2026-22784 Lychee cross-album password propagation on Album unlocking

Lychee is a free, open-source photo-management tool. Prior to 7.1.0, an authorization vulnerability exists in Lychee's album password unlock functionality that allows users to gain possibly unauthorized access to other users' password-protected albums. When a user unlocks a password-protected...

CVE-2023-31477

A path traversal issue was discovered on GL.iNet devices before 3.216. Through the file sharing feature, it is possible to share an arbitrary directory, such as /tmp or /etc, because there is no server-side restriction to limit sharing to the USB path...

CVE-2023-4836

The WordPress File Sharing Plugin WordPress plugin before 2.0.5 does not check authorization before displaying files and folders, allowing users to gain access to those filed by manipulating IDs which can easily be brute forced...