org.apache.cxf: Apache CXF: Denial of Service vulnerability with temporary files

A flaw was found in Apache CXF. In some edge cases with large data stream caching, the CachedOutputStream instances may not be closed and, if backed by temporary files, may fill up the file system and trigger a denial of service...

The vulnerability of the realtime_counter_init() function in the arch/arm/mach-omap2/timer.c module, which is part of the ARM platform support for the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the realtimecounterinit function in the arch/arm/mach-omap2/timer.c module of the Linux operating system’s ARM platform support module is related to improper memory release „memory leak“. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability in the `io.netty.handler.codec.dns.DnsCodecUtil` component of the Netty framework, which is used for developing network applications, servers, and clients, allows a attacker to cause a service failure.

The vulnerability of the io.netty.handler.codec.dns.DnsCodecUtil component in the Netty framework, which is used for developing network applications, servers, and clients, relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious...

PT-2026-53963

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server version 9.0 IBM WebSphere Application Server version 8.5 Description A cross-site scripting issue exists within the administrative console help system. Cross-site scripting is a flaw that allows an attacker to...

PT-2026-70014

Name of the Vulnerable Software and Affected Versions FreeBSD affected versions not specified Description An issue exists in the kern jail set and kern jail get functions when the JAIL AT DESC flag is used. The system releases the reference to the caller's current prison before searching for the...

PT-2026-55227

Name of the Vulnerable Software and Affected Versions FreeBSD affected versions not specified Description A race condition exists in the execve system call during the execution of a SUID binary. The kernel installs the new virtual address space before updating the process credentials. This create...

AlmaLinux 9 : kernel (ALSA-2026:30848)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:30848 advisory. kernel: drm/amd/display: Do not skip unrelated mode changes in DSC validation CVE-2026-31488 kernel: ipv6: icmp: clear skb2-cb in ip6errgenicmpv6unreach...

Axis Communications AXIS OS Improper Validation of Syntactic Correctness of Input (CVE-2024-8772)

A researcher in the AXIS OS Bug Bounty Program has found that the VAPIX API managedoverlayimages.cgi was vulnerable to a race condition attack enabling an attacker to block access to the overlay configuration page in the web interface of the Axis device. Exploitation requires prior authentication...

OPENSUSE-SU-2026:11155-1 kbfs-6.6.3-2.1 on GA media

These are all security issues fixed in the kbfs-6.6.3-2.1 package on the GA media of openSUSE Tumbleweed...

Hitachi Energy e-mesh EMS

SUMMARY Hitachi Energy is aware of a buffer overflow vulnerability that affects e-mesh EMS product versions listed in this document. Successful exploitation of this vulnerability could lead to a buffer overflow condition, potentially resulting in application outages denial of service and...

PT-2026-54308

Name of the Vulnerable Software and Affected Versions Google Chrome on Windows versions prior to 150.0.7871.47 Description Insufficient policy enforcement in the Media component allows a remote attacker to bypass site isolation, a security feature that ensures web pages from different sites are...

Important Photon OS Security Update - PHSA-2026-5.0-91-0911

Updates of 'rubygem-faraday', 'python3-urllib3', 'rubygem-nokogiri', 'python3-mistune' packages of Photon OS have been released...

The vulnerability of the rtl92cu_tx_fill_desc() function in the drivers/net/wireless/realtek/rtlwifi/rtl8192cu/trx.c driver module of the Realtek wireless communication adapter driver for the Linux operating system allows a hacker to access protected information or cause a service failure.

The vulnerability of the rtl92cutxfilldesc function in the drivers/net/wireless/realtek/rtlwifi/rtl8192cu/trx.c module of the Realtek wireless communication adapter driver for the Linux operating system is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to...

PT-2026-55922

Name of the Vulnerable Software and Affected Versions FreeBSD affected versions not specified Description A use-after-free issue exists in the tcp rack.ko module of the TCP RACK setsockopt2 handler. The handler releases the connection lock to copy option data from userspace and subsequently...

Axis Communications AXIS OS Path Traversal (CVE-2024-0067)

A researcher in the AXIS OS Bug Bounty Program has found that the VAPIX API ledlimit.cgi was vulnerable for path traversal attacks allowing to list folder/file names on the local file system of the Axis device. Axis has released patched AXIS OS versions for this flaw. This plugin only works with...

Linux Distros Unpatched Vulnerability : CVE-2026-54371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate privileges b...

PT-2026-53949

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.0 Description Authenticated attackers can execute arbitrary OS commands and read sensitive files, including credentials. This can lead to complete system compromise and lateral movement within the...

Axis Communications AXIS OS Improper Validation of Syntactic Correctness of Input (CVE-2024-8160)

A researcher in the AXIS OS Bug Bounty Program has found that the VAPIX API ftptest.cgi did not have a sufficient input validation allowing for a possible command injection to transfer files to/from the Axis device. This flaw can only be exploited after authenticating with an...

FreeBSD-SA-26:45.audit

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:45.audit Security Advisory The FreeBSD Project Topic: Incorrect audit records for ptrace2 syscall requests Category: core Module: audit Announced: 2026-06-30...

PT-2026-54184

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 150.0.7871.47 Description An inappropriate implementation in iOSWeb allows a remote attacker to perform UI spoofing via a crafted HTML page, provided they can convince a user to perform specific UI...