343 matches found
CVE-2026-64547
In the Linux kernel, the following vulnerability has been resolved: net: usb: net1080: validate packetlen before pad-byte access in rxfixup For an even packetlen, net1080rxfixup reads the pad byte at skb-datapacketlen before the skb-len != packetlen check further down, and packetlen is only bound...
GHSA-R292-9MHP-454M vulnerabilities
Vulnerabilities for packages: sqlpad, node-gyp, lerna, actions-runner, kubeflow-centraldashboard, npm, pulumi, kibana, haraka...
CVE-2026-64439
In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out async aead implementations at alloc krb5aeadencrypt, krb5aeaddecrypt in rfc3961simplified.c and rfc8009encrypt, rfc8009decrypt in rfc8009aes2.c set a NULL completion callback and treat any negative retur...
CVE-2026-64401
In the Linux kernel, the following vulnerability has been resolved: smb: client: resolve SWN tcon from live registrations cifsswnnotify looks up a witness registration by id under cifsswnregidrmutex, drops the mutex, and then uses the registration's cached tcon pointer. That pointer is not a...
CVE-2026-64285
In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Pin source page for write when adding CPUID data for SNP guest When populating a guestmemfd instance with the initial CPUID data for an SNP guest, acquire a writable pin on the source page as KVM will write back the...
GHSA-XCPC-8H2W-3J85 vulnerabilities
Vulnerabilities for packages: sqlpad, kibana...
CVE-2026-43699
A use-after-free issue was addressed with improved memory management...
GHSA-C8MV-CH2P-4GWV vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-X454-5847-5CWH vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-VRWX-R2MM-M3QM vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-2FJR-R86H-FPW3 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-VR5V-MVJW-PXV5 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-VR3H-9WM8-MCR4 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-Q2J9-M6G3-738J vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-9R7R-6R2R-9FMJ vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-13867 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-13909 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-M28G-H5XQ-JC4P vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-58250
NATS Server is a high-performance server for NATS.io, the cloud and edge native messaging system. Prior to 2.12.8 and 2.11.17, an unauthenticated peer with network access to a leafnode listener with compression enabled could crash the server during the pre-authentication leafnode handshake by...
perl-HTTP-Daemon: HTTP::Daemon: Arbitrary code execution via OS command injection in send_file()
A flaw was found in HTTP::Daemon, a Perl module used for creating HTTP servers. A remote attacker can exploit this vulnerability by providing specially crafted input to the sendfile function, leading to OS command injection. This allows the attacker to execute arbitrary commands on the system wit...