CVE-2026-39385

CVE-2026-39385 — Frappe LMS : Open-source LMS with a vulnerability in versions ≤ 2.51.0 where a user could bypass course payment validation by using an unrelated batch. Root cause: enrollment validation did not require the batch to be linked to the corresponding course. Impact: potential unauthor...

CVE-2026-35198

creationtimestamp| type| source ---|---|--- 2026-07-20 16:44:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr3qincwha2e 2026-07-20 17:01:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr3rids62y2q 2026-07-20 17:40:41+00:00| seen|...

CVE-2026-51027

creationtimestamp| type| source ---|---|--- 2026-07-20 16:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr3qf2lcto2r 2026-07-20 17:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr3rgcsfas2f 2026-07-20 17:50:52+00:00| seen|...

EUVD-2026-46015

In the Linux kernel, the following vulnerability has been resolved: net/sched: dualpi2: fix GSO backlog accounting When DualPI2 splits a GSO skb into N segments, it propagates N additional packets to its parent before returning NETXMITSUCCESS. The parent then accounts for the original skb once...

EUVD-2026-46013

In the Linux kernel, the following vulnerability has been resolved: i2c: i801: fix hardware state machine corruption in error path A severe livelock and subsequent Hung Task panic were observed in the i2c-i801 driver during concurrent Fuzzing. The crash is caused by an unconditional hardware...

CVE-2026-35591 Possible heap-based buffer overflow when decoding TIFF image containing well-crafted tile

libvips is a fast image processing library with low memory needs. The tiffload operation in libvips versions before and including 8.18.1 could incorrectly determine the number of channels in a JPEG or JPEG2000-encoded tile within a TIFF image, leading to a possible buffer overflow. This has been...

CVE-2026-35590

CVE-2026-35590 affects libvips’ EXIF decoder. Versions

CVE-2026-33328

libvips is a fast image processing library with low memory needs. On 32-bit systems in versions before and including 8.18.0, the gifload operation could incorrectly determine dimensions leading to an integer overflow. This has been patched in version 8.18.1...

CVE-2026-33328 Possible integer overflow on 32-bit systems when reading GIF images

libvips is a fast image processing library with low memory needs. On 32-bit systems in versions before and including 8.18.0, the gifload operation could incorrectly determine dimensions leading to an integer overflow. This has been patched in version 8.18.1...

CVE-2026-57311

creationtimestamp| type| source ---|---|--- 2026-07-20 16:00:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3o3ia3e62j 2026-07-20 16:15:05+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-57309 2026-07-20 22:55:53+00:00| seen|...

USN-8568-1 linux-oem-7.0 vulnerabilities

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. CVE-2025-54518 Several security issues...

USN-8568-1: Linux kernel (OEM) vulnerabilities

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. CVE-2025-54518 Several security issues...

USN-8566-1: Linux kernel vulnerabilities

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. CVE-2025-54518 Several security issues...

USN-8566-1 linux, linux-gcp, linux-gke, linux-realtime vulnerabilities

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. CVE-2025-54518 Several security issues...

CVE-2026-64181

A flaw was found in the Linux kernel's memory management subsystem. On 32-bit x86 systems with Transparent Huge Pages THP enabled, a missing feature for handling special page table entries can lead to incorrect tracking of memory resources. This can result in system warnings, errors related to...

CVE-2026-14448

creationtimestamp| type| source ---|---|--- 2026-07-20 13:45:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3gj5gtx32j 2026-07-20 14:34:18+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mr3jam3zj32l 2026-07-21 11:39:39+00:00| seen|...

nodejs: Node.js: Denial of Service via unlimited HTTP/2 ORIGIN frames

A flaw was found in Node.js. A malicious server can exploit the HTTP/2 client by sending an unlimited number of ORIGIN frames. This can lead to an Out of Memory error on the client, resulting in a denial of service...

Important: Red Hat Security Advisory: nodejs:22 security, bug fix, and enhancement update

An update for the nodejs:22 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

SUSE-SU-2026:3130-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 bsc1243603. - CVE-2025-71302: drm/panthor: fix for dma-fence safe acce...

CVE-2026-16246

In BRAIN2 versions prior to 3.09, the application LogPathConfig.exe is executed during setup. As a result, the Windows group Everyone is granted full control over %ProgramData% instead of being restricted to %ProgramData%\Bizerba\BRAIN2. Starting with BRAIN2 3.09, the setup no longer executes thi...