CVE-2026-25077

Account users are allowed by default to register templates to be downloaded directly to the primary storage for deploying instances using the KVM hypervisor. Due to missing file name sanitization, an attacker can register malicious templates to execute arbitrary code on the KVM hosts. This can...

The vulnerability of the vxlan_flagattr_error() function in the Linux operating system’s kernel module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the vxlanflagattrerror function in the Linux kernel module is related to the occurrence of operations that go beyond the buffer boundaries in memory. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

CVE-2026-6940

A flaw was found in radare2. A local attacker can exploit a path traversal vulnerability during project deletion by crafting absolute paths. This allows the attacker to delete arbitrary directories outside the intended project storage, leading to a loss of data integrity and system availability...

JLSEC-2026-183

A flaw was found in the src/list.c of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input file to tar to cause uncontrolled consumption of memory. The highest threat from this vulnerability is to system availability...

JLSEC-2026-162

A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23. The highest threat from this vulnerability is to system availability...

CVE-2025-40897

The CVE-2025-40897 entry concerns Guardian/CMC Threat Intelligence prior to version 26.0.0, where an access control flaw allows users with view-only privileges to perform administrative actions, potentially altering rules configuration and affecting availability. The vulnerability stems from impr...

PT-2026-32566

Due to a missing authorization check in SAP ERP and SAP S/4HANA Private Cloud and On-Premise, an authenticated attacker could execute a particular ABAP report to overwrite any existing eight?character executable ABAP report without authorization. If the overwritten report is subsequently executed...

CVE-2026-39983

A flaw was found in basic-ftp, an FTP client for Node.js. A remote attacker can exploit this vulnerability by injecting Carriage Return Line Feed CRLF sequences into file path parameters used by high-level APIs. This allows the attacker to split a single intended FTP command into multiple command...

JLSEC-2026-27

A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. An attacker having permission to create non-temporary objects in at least one schema can execute arbitrary SQL functions under the identity of a superuser. The highest...

The vulnerability of the amd_set_spi_freq() function in the drivers/spi/spi-amd.c module of the Linux kernel’s SPI device support driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the amdsetspifreq function in the drivers/spi/spi-amd.c module of the Linux device support driver for SPI devices is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

The vulnerability of the rtw_core_deinit() function in the drivers/net/wireless/realtek/rtw88/main.c file of the Realtek wireless adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rtwcoredeinit function in the drivers/net/wireless/realtek/rtw88/main.c file of the Realtek wireless adapter driver for the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the binder_update_page_range() function in the drivers/android/binder_alloc.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the binderupdatepagerange function in the drivers/android/binderalloc.c module of the Linux operating system’s kernel is related to the use of memory after deallocation. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity,...

The vulnerability of the __bpf in the kernel/bpf/helpers.c file, which is part of the BPF interpreter support for Linux’s kernel, allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bpf function in the kernel/bpf/helpers.c file, which is part of the BPF interpreter support for Linux’s operating system, relates to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

BIT-CEPH-2021-20288

An authentication flaw was found in ceph in versions before 14.2.20. When the monitor handles CEPHXGETAUTHSESSIONKEY requests, it doesn't sanitize otherkeys, allowing key reuse. An attacker who can request a globalid can exploit the ability of any user to request a globalid previously associated...

The vulnerability of the __nilfs_mark inode_dirty() function in the fs/nilfs2/inode.c file of the NILFS2 file system of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nilfsmark inodedirty function in the fs/nilfs2/inode.c file of the NILFS2 file system in the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

ROS-20260313-73-0022

A vulnerability in the raid1reshape function of the Linux operating system kernel is related to incorrect resource clearing or freeing. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information...

The vulnerability in the driver module drivers/hid/intel-thc-hid/intel-quicki2c/quicki2c-dev.h of the Intel-I2C driver in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the drivers/hid/intel-thc-hid/intel-quicki2c/quicki2c-dev.h module of the Linux operating system’s kernel relates to access to memory beyond the permissible buffer data size due to errors in interpreting data received from hardware components. Exploiting this vulnerability ca...

EUVD-2025-208552

Improper input validation in the UEFI firmware for some Intel Reference Platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable data manipulation. This result may potentially occur via local access when...

EUVD-2026-10465

Due to an uncontrolled resource consumption Denial of Service vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly invoke a remote-enabled function module with an excessively large loop-control parameter. This triggers prolonged loop execution th...

The vulnerability of the ttm_bo_validate() function in the drivers/gpu/drm/ttm/ttm_bo.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ttmbovalidate function in the drivers/gpu/drm/ttm/ttmbo.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...