121603 matches found
Astra Linux – Vulnerability in Firefox and Thunderbird
The Enhanced Tracking Protection’s Strict mode may have inadvertently allowed a CSP frame-src bypass and DOM-based XSS attacks through the Google SafeFrame shim in the Web Compatibility extension. This issue could have exposed users to malicious frames disguised as legitimate content. This...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: x86/coco: Requires seeding the RNG with RDRAND on CoCo systems. There are few uses of CoCo that do not rely on functional cryptography and, consequently, a functioning RNG. Unfortunately, the CoCo threat model means that the VM...
Astra Linux – Vulnerability in Jackson-Databind
FasterXML Jackson-Databind 2.x versions before 2.9.10.8 mishandle the interaction between serialization gadgets and typing, related to com.newrelic agent.deps.ch.qos.logback.core.db.JNDIConnectionSource...
Astra Linux – Vulnerability in NTP
In NTP versions prior to 4.2.8p14 and 4.3.x before 4.3.100, ntpd allows an off-path attacker to block unauthenticated synchronization via a server mode packet with a spoofed source IP address. This occurs because transmissions are rescheduled even when a packet lacks a valid origin timestamp...
CVE-2026-21391
creationtimestamp| type| source ---|---|--- 2026-09-14 12:33:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4mojdw4nqgh7w 2026-09-14 13:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvi7rcze6a2f 2026-09-14 14:07:14+00:00| seen|...
Astra Linux – Vulnerability in Jackson-Databind
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource...
Astra Linux – Vulnerability in sshfs-fuse
SSHFS is a network filesystem client for connecting to SSH servers. From version 1.4 up to 3.7.6, SSHFS accepts a bracketed mount source such as -oProxyCommand=CMD:/path. The findbasepath function removes the brackets, leaving a host value that starts with a “-” and is passed directly to ssh as a...
Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: devlink: Report devlinkporttypewarn source device. devlinkporttypewarn is intended to be reported for ports that do not have a port type set. However, it is not easy to determine which device driver does not have a devlink por...
Astra Linux – Vulnerability in Linux
The bpf verifier in the Linux kernel failed to properly handle truncation of the mod32 destination register when the source register was known to be 0. A local attacker who had the ability to load bpf programs could exploit this vulnerability by performing out-of-bounds reads in kernel memory,...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: pnode: terminate at peers of source The propagatemnt function handles mount propagation when creating mounts and propagates the source mount tree @sourcemnt to all applicable nodes of the destination propagation mount tree, heade...
Astra Linux – Vulnerability in OpenSSL
Issue Summary: Checking excessively long DH keys or parameters can be very slow. Impact Summary: Applications that use functions like DHcheck, DHcheckex, or EVPPKEYparamcheck to check DH keys or parameters may experience prolonged delays. If the keys or parameters are obtained from an untrusted...
Astra Linux – Vulnerability in dpkg
In dpkg, the Debian package management system, versions prior to 1.21.8, 1.20.10, 1.19.8, and 1.18.26 are vulnerable to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include debian.tar, the in-place extraction process may...
Astra Linux – Vulnerability in OpenSSL
Issue summary: Generating excessively long X9.42 DH keys or checking overly long X9.42 DH keys or parameters can be very slow. Applications that use functions like DHgeneratekey to generate an X9.42 DH key may experience prolonged delays. Similarly, applications that use functions like...
CVE-2022-28099
creationtimestamp| type| source ---|---|--- 2026-09-14 12:00:04+00:00| seen| Telegram/jP5i0elPtle8Ek1urEeGQwWyb2IHykjb4RwkAMHe7Tv9BPk 2026-09-15 00:00:21+00:00| published-proof-of-concept| Telegram/jP5i0elPtle8Ek1urEeGQwWyb2IHykjb4RwkAMHe7Tv9BPk...
CVE-2026-90700
creationtimestamp| type| source ---|---|--- 2026-09-14 10:15:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ifo4z5eo3len3...
CVE-2026-90619
creationtimestamp| type| source ---|---|--- 2026-09-14 04:12:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3bzjz64bmjrpe...
CVE-2026-38924
creationtimestamp| type| source ---|---|--- 2026-09-14 04:00:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7r5ymqp4hse4m...
CVE-2026-88861
creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:15+00:00| seen| Telegram/0phjcISM7xaEvPyzzbSiHps9Ynh5NA4Z3XacHD49buP-a4 2026-09-15 00:00:21+00:00| published-proof-of-concept| Telegram/0phjcISM7xaEvPyzzbSiHps9Ynh5NA4Z3XacHD49buP-a4...
CVE-2026-22706
creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:15+00:00| seen| Telegram/DdYTYSDe8lvqixn7SsuHC2cVYP8OwvHWnrdarY89A6zETG4 2026-09-15 00:00:21+00:00| published-proof-of-concept| Telegram/DdYTYSDe8lvqixn7SsuHC2cVYP8OwvHWnrdarY89A6zETG4...
CVE-2026-20516
creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:14+00:00| seen| Telegram/0phjcISM7xaEvPyzzbSiHps9Ynh5NA4Z3XacHD49buP-a4 2026-09-14 03:00:15+00:00| seen| Telegram/hyTMOXILeGPH3mOM6D0YvgOQ4qPuk9nF2x2dv8gC9J0Ss 2026-09-15 00:00:21+00:00| published-proof-of-concept|...