234751 matches found
The vulnerability of the leave_alt-screen() function in the drivers/tty/vt/vt.c file of the Linux kernel-based virtual terminal driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the leavealt-screen function in the drivers/tty/vt/vt.c module of the Linux kernel virtual terminal driver framework is related to an incorrect calculation of the buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...
The vulnerabilities in the functions aie2cmdlist_fill_npu_cf(), aie2cmdlist_fill_npu_dpu(), aie2cmdlist_fill_npu_preempt(), and aie2cmdlist_fill_npu_elf() of the driver module drivers/accel/amdxdna/aie2_message.c, which are part of the Linux kernel’s acceleration devices driver, allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the functions aie2cmdlistfillnpucf, aie2cmdlistfillnpudpu, aie2cmdlistfillnpupreempt, and aie2cmdlistfillnpuelf in the driver module drivers/accel/amdxdna/aie2message.c, which is part of the Linux kernel’s acceleration devices driver, stems from buffer overflow vulnerabilitie...
The vulnerability of the vxlan_na_create() function in the drivers/net/vxlan/vxlan_core.c file of the Linux kernel’s network device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the vxlannacreate function in the drivers/net/vxlan/vxlancore.c file of the Linux kernel’s network device driver is related to a buffer overflow attack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of th...
The vulnerability of the DEFINE_IDA() function in the drivers/auxdisplay/line-display.c module of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the DEFINEIDA function in the drivers/auxdisplay/line-display.c module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the cpsw_ndo_set_rx_mode_work() function in the drivers/net/ethernet/ti/cpsw_new.c module of the Ethernet network adapter driver for Texas Instruments’ Linux kernel allows a hacker to cause a service failure.
The vulnerability of the cpswndosetrxmodework function in the drivers/net/ethernet/ti/cpswnew.c module of the Ethernet network adapter driver for Texas Instruments’ Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an...
The vulnerability of the br_nd_send() function in the net/bridge/br_arp_nd_proxy.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the brndsend function in the net/bridge/brarpndproxy.c module of the Linux kernel is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
The vulnerability of the `rxrpcdestroy_call()` function in the `net/rxrpc/call_object.c` module, which supports RxRPC session sockets in the Linux operating system, allows a attacker to cause a service failure.
The vulnerability of the rxrpcdestroycall function in the net/rxrpc/callobject.c module, which supports RxRPC session sockets in Linux kernels, is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the fastrpc_init_create_static_process() function in the drivers/misc/fastrpc.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the fastrpcinitcreatestaticprocess function in the drivers/misc/fastrpc.c module of the Linux kernel is related to the repeated release of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...
The vulnerability of the th1520_aon_power_update() function in the drivers/firmware/thead module, located in the Linux kernel-based firmware, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the th1520aonpowerupdate function in the drivers/firmware/thead module, within the th1520-aon.c driver for Linux kernel patches, is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability...
The vulnerability in the net/netfilter/nf_conntrack_netlink.c module of the Linux kernel’s netfilter component allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability in the net/netfilter/nfconntracknetlink.c module of the Linux kernel’s netfilter component is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...
The vulnerability of the Python programming language’s pip module arises from incorrect pathname restrictions for directories, allowing attackers to compromise the integrity of protected information.
The vulnerability of the Python programming language’s pip module is related to an incorrect limitation on the path name for the directory. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...
The vulnerability of the bcpkix module in the Java Bouncy Castle cryptographic library allows a hacker to bypass existing security mechanisms.
The vulnerability of the bcpkix module in the Java Bouncy Castle cryptographic library is related to the use of the outdated cryptographic algorithm SHA-1. Exploiting this vulnerability allows a remote attacker to bypass existing security measures...
The vulnerability of the FrodoEngine.Java file in the Bouncy Castle cryptographic library for the Java platform allows a hacker to disclose protected information.
The vulnerability of the bcpkix module in the Java Bouncy Castle cryptographic library relates to the use of hidden time channels for data transmission. Exploiting this vulnerability allows a remote attacker to disclose the protected information...
The vulnerability of the jsonCacheInsert() function in the json.c module of the SQLite database management system allows a hacker to execute arbitrary code.
The vulnerability of the jsonCacheInsert function in the json.c module of the SQLite database management system is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created JSON file...
The vulnerability of Google Chrome browser’s Blink rendering module allows a hacker to execute arbitrary code.
The vulnerability of the Blink rendering module in Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the btree.c module in the SQLite database management system allows a hacker to disclose sensitive information or cause service failures by using a specially created db file.
The vulnerability of the btree.c module in the SQLite database management system is related to reading data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause a service failure by using a specially created db file...
AlmaLinux 10 : pipewire (ALSA-2026:47083)
The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:47083 advisory. pipewire: PipeWire: Sandbox escape and arbitrary code execution via malicious library loading CVE-2026-5674 Tenable has extracted the preceding description block...
CVE-2026-50986
Technical details are not publicly available in the provided documents. Monitor for updates from official sources; no concrete information about affected versions, impact scope, or remediation is provided here.
PT-2026-66773
In SERVER mode, pgAdmin 4 enforces authentication per route via the @pga login required decorator; the application's before request hook only handles desktop-mode auto-login and the Kerberos/Webserver-auth redirect, so any route shipped without the decorator is reachable without authentication...