GHSA-VHH6-F54W-X5GW vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-J44F-447F-H94P vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-5871 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-35074

Dell PowerProtect Data Domain Feature Release versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, and LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper neutralization of special elements used in an OS Command Injection...

CVE-2026-5131 Server-Side Request Forgery in GREENmod

GREENmod uses named pipes for communication between plugins, the web portal, and the system service, but the access control lists for these pipes are configured incorrectly. This allows an attacker to communicate with the stream and upload any XML or JSON file, which will be processed by the name...

CVE-2026-5131

GREENmod uses named pipes for communication between plugins, the web portal, and the system service, but the access control lists for these pipes are configured incorrectly. This allows an attacker to communicate with the stream and upload any XML or JSON file, which will be processed by the name...

USN-8185-1: Linux kernel (NVIDIA) vulnerabilities

Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issue to cause load malicious CPU microcod...

USN-8179-2: Linux kernel (FIPS) vulnerabilities

Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issue to cause load malicious CPU microcod...

USN-8184-1 linux-realtime, linux-realtime-6.8 vulnerabilities

Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issue to cause load malicious CPU microcod...

USN-8184-1: Linux kernel (Real-time) vulnerabilities

Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issue to cause load malicious CPU microcod...

n-days-poc-benchmark-and-dataset

ICS N-Day Vulnerability PoC Benchmark Suite A structured coll...

USN-8177-1: Linux kernel vulnerabilities

Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issue to cause load malicious CPU microcod...

CVE-2026-33116 vulnerabilities

Vulnerabilities for packages: dotnet-sdk, dotnet-sdk-stage0, dotnet, dotnet-bootstrap, promitor, powershell...

GHSA-W3X6-4M5H-CXQF vulnerabilities

Vulnerabilities for packages: dotnet-sdk, dotnet-sdk-stage0, dotnet, dotnet-bootstrap, promitor, powershell...

GHSA-G4VJ-CJJJ-V7HG vulnerabilities

Vulnerabilities for packages: dotnet, dotnet-sdk-stage0, dotnet-bootstrap, dotnet-sdk, azure-functions-host...

CVE-2026-33116 vulnerabilities

Vulnerabilities for packages: powershell, dotnet, dotnet-sdk-stage0, dotnet-bootstrap, dotnet-sdk, promitor...

GHSA-W3X6-4M5H-CXQF vulnerabilities

Vulnerabilities for packages: powershell, dotnet, dotnet-sdk-stage0, dotnet-bootstrap, dotnet-sdk, promitor...

CVE-2026-34479 vulnerabilities

Vulnerabilities for packages: celeborn, kserve-modelmesh, kafka, druid, spark, logstash, flink, solr, akhq, sonarqube...

[SECURITY] Fedora 43 Update: nix-2.31.4-1.fc43

Nix is a purely functional package manager. It allows multiple versions of a package to be installed side-by-side, ensures that dependency specifications are complete, supports atomic upgrades and rollbacks, allows non-root users to install software, and has many other features. It is the basis o...

Linux Distros Unpatched Vulnerability : CVE-2026-40228

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users when a logger -p emerg command is executed, if...