57 matches found
Astra Linux – vulnerability in linux-5.10, linux-6.1, linux, linux-5.15
In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Add tx check to prevent skb leak Below is a summary of how the driver stores a reference to an skb during transmission: txbufffreemapconsumerindex-skb = newskb; freemapconsumerindex = IBMVNICINVALIDMAP; consumerindex ++;...
CLSA-2026-1791916787 cups: Fix of CVE-2026-107885
CVE-2026-107885: Don't allow clients to hold a job open longer than the multiple-operation-time-out value...
CLSA-2026-1791916765 cups: Fix of CVE-2026-107885
CVE-2026-107885: Don't allow clients to hold a job open longer than the multiple-operation-time-out value...
CLSA-2026-1791870722 cups: Fix of CVE-2026-107885
CVE-2026-107885: Don't allow clients to hold a job open longer than the multiple-operation-time-out value...
CVE-2026-45802
FPDI is a collection of PHP classes that facilitate reading pages from existing PDF documents and using them as templates in FPDF. Prior to version 2.6.7, an attacker can upload a small, malicious PDF file that will cause the server-side script to crash due to memory exhaustion or a script...
CVE-2026-45836
The CVE-2026-45836 vulnerability affects the Linux kernel Bluetooth L2CAP code and stems from a missing NULL guard in l2cap_sock_get_sndtimeo_cb(), which can cause a null pointer dereference. The issue is resolved by adding the same NULL guard already present in l2cap_sock_resume_cb() and l2cap_s...
CVE-2026-45836
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix null-ptr-deref in l2capsockgetsndtimeocb Add the same NULL guard already present in l2capsockresumecb and l2capsockreadycb...
Edimax EW-7438RPn security vulnerabilities
Edimax EW-7438RPn is a wireless signal extender from Taiwan, China-based Edimax. A security vulnerability exists in the Edimax EW-7438RPn version 1.31, which originates in the parameter maxConn/timeOut operation of the function formConnectionSetting in the file /goform/formConnectionSetting, and...
PT-2026-43221
Name of the Vulnerable Software and Affected Versions Visual Ping version 0.8.0.0 Description A buffer overflow occurs during the handling of input fields, allowing a local attacker to crash the application. By injecting payloads exceeding 4108 bytes into the Host, Time Out, Packet Size, Pause, o...
CVE-2026-9362
CVE-2026-9362: Edimax EW-7438RPn firmware 1.12 has a command-injection in the Setting Handler’s formConnectionSetting (/goform/formConnectionSetting). Manipulating max_Conn/timeOut parameters can lead to remote execution. Attack vector is network with low complexity; authentication required is LO...
Unauthenticated DoS in avatar cache in Grafana
Grafana is an open-source platform for monitoring and observability. The platform supports users having their own avatars, which can be sourced from the Gravatar service API. This uses a cache, to ensure that we don't overload the service. If these requests time out after 3 seconds, a Goroutine i...
Azure Linux 3.0 Security Update: kernel (CVE-2025-37886)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-37886 advisory. - In the Linux kernel, the following vulnerability has been resolved: pdscore: make waitcontext part of qinfo...
CVE-2025-27063 Use After Free in Video
Memory corruption during video playback when video session open fails with time out error...
EUVD-2002-1249
Malware in sbrugna...
EUVD-2025-14293
Malicious code in bioql PyPI...
CVE-2025-39801 usb: dwc3: Remove WARN_ON for device endpoint command timeouts
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Remove WARNON for device endpoint command timeouts This commit addresses a rarely observed endpoint command timeout which causes kernel panic due to warn when 'paniconwarn' is enabled and unnecessary call trace prints...
SAML URL monitor to login.microsoftonline.com is down
Continuous error logs on the Netscaler dashboard as below "8699 77 PPE-0 DBSMonServiceBindinglogin.microsoftonline.com:443tcp-defaultvpndbssvc1339998057: DOWN; Last response: Failure - Time out during TCP connection establishment stage"...
CVE-2025-46741
A suspended or recently logged-out user could continue to interact with Blueframe until the time-out period occurred...
CVE-2025-46741
The provided connected sources identify a vulnerability in Blueframe where a suspended or recently logged-out user can continue to interact with the system until the time-out period expires. Affected product is Blueframe; no exact versions are specified in the materials. The root cause, affected ...