7063 matches found
CVE-2026-72043 LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect()
In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix missing dirty page tracking in pte,pmdwrprotect When hardware page table walker PTW is enabled on LoongArch, the CPU may set PAGEDIRTY directly in the page table entry during a write TLB miss, without going through...
EUVD-2026-59001
In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix missing dirty page tracking in pte,pmdwrprotect When hardware page table walker PTW is enabled on LoongArch, the CPU may set PAGEDIRTY directly in the page table entry during a write TLB miss, without going through...
CVE-2026-72043
This CVE describes a LoongArch Linux kernel issue where hardware page table walker (PTW) could set only _PAGE_DIRTY in PTE/PMD during a write TLB miss, leaving _PAGE_MODIFIED unchanged. On fork/clone with COW, pte_wrprotect()/pmd_wrprotect() clear _PAGE_WRITE and _PAGE_DIRTY, which could lose the...
PT-2026-72232
In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix missing dirty page tracking in pte,pmd wrprotect When hardware page table walker PTW is enabled on LoongArch, the CPU may set PAGE DIRTY directly in the page table entry during a write TLB miss, without going throu...
GO-2025-3564 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...
GO-2026-5761 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit, podman-fips, node-feature-discovery-fips, buildah, podman, gpu-operator-fips, cadvisor-fips, prometheus-podman-exporter-fips, rancher, k8s-device-plugin, k8s-device-plugin-fips, buildah-fips, sriov-network-device-plugin, rancher-agent,...
GO-2026-4602 vulnerabilities
Vulnerabilities for packages: amazon-cloudwatch-agent-operator-fips, cerbos-fips, ingress-nginx-controller-fips, pulumi-kubernetes-operator, cert-manager-google-cas-issuer-fips, dynamic-localpv-provisioner-fips, terraform-provider-random, kubelet-csr-approver, kyverno-policy-reporter-ui,...
GO-2024-2899 vulnerabilities
Vulnerabilities for packages: melange, pombump...
GO-2026-5239 vulnerabilities
Vulnerabilities for packages: grafana...
GO-2024-2948 vulnerabilities
Vulnerabilities for packages: kots, kubescape, wolfictl, zarf, terragrunt, snyk-cli, grype, zot, tflint, conftest, tfsec, k9s, terraform, trivy...
GO-2024-2609 vulnerabilities
Vulnerabilities for packages: thanos-operator, bom, ip-masq-agent, aws-efs-csi-driver, nri-f5, pulumi, kind, k8sgpt-operator, metallb, nri-mongodb, dataplaneapi, cass-operator, pulumi-language-yaml, secrets-store-csi-driver-provider-gcp, tailscale, dynamic-localpv-provisioner, nri-apache,...
GO-2025-3754 vulnerabilities
Vulnerabilities for packages: kots, sops, crossplane-provider-family-azure, pulumi, crossplane-provider-aws-eks, kubescape, argocd-image-updater, gitsign, xeol, crossplane-provider-azure-authorization, actions-runner-controller, crossplane-provider-aws-cloudwatchlogs, policy-controller,...
Linux Distros Unpatched Vulnerability : CVE-2026-73648
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. From 1.0.3 until 1.7.1, Rails::HTML::PermitScrubber restricted SVG...
GHSA-7JMF-5VCP-F672
creationtimestamp| type| source ---|---|--- 2026-08-13 22:43:46+00:00| seen| https://gist.github.com/CaptBoykin/fb932b14c932323583161460666e60da...
CVE-2026-56858
Technical details about CVE-2026-56858 are not publicly available in the provided connected documents. Monitor for updates. The initial description notes that pathological inputs could close an unescaped '/' to inject content, potentially leading to XSS.
GO-2026-6091 Fix Javascript regexp context tracking in html/template
Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...
GHSA-3HVR-PHFH-X26G vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure...
CVE-2026-66460
Subscriber Cross Site Scripting XSS in AfterShip Tracking = 1.18.1 versions...