CVE-2018-12598

CVE-2018-12598 CVE-2018-12598 Cronología ================ 2018-06-08: Descubierto 2018-06-11: Re-prueba del entorno de staging 2018-06-12: Re-prueba del entorno en vivo 2018-06-19: Comunicación interna 2018-06-21: Notificación al proveedor 2018-06-XX: Retroalimentación del proveedor 2018-06-XX: E...

CVE-2018-12597

CVE-2018-12597 CVE-2018-12597 Cronología ================ 2018-06-08: Descubierto 2018-06-11: Reprobar entorno de staging 2018-06-12: Reprobar entorno en vivo 2018-06-19: Comunicación interna 2018-06-21: Notificación al proveedor 2018-06-XX: Comentarios del proveedor 2018-06-XX: Comentarios del...

74cms - ajax_street.php 'x' SQL Injection

SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajaxstreet.php. id: CVE-2020-22208 info: name: 74cms - ajaxstreet.php 'x' SQL Injection author: ritikchaddha severity: critical description: | SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajaxstreet.php. impact: | Successful...

Linux Distros Unpatched Vulnerability : CVE-2026-94648

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of resources without limits or throttling vulnerability in Apache Thrift dart bindings. This issue affects Apache Thrift: before 0.25.0. Users are...

Linux Distros Unpatched Vulnerability : CVE-2026-94638

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of resources without limits or throttling vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are...

Linux Distros Unpatched Vulnerability : CVE-2026-100816

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Site isolation issue in the DOM: Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

Linux Distros Unpatched Vulnerability : CVE-2026-100806

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized memory in the Graphics: WebGPU component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

Linux Distros Unpatched Vulnerability : CVE-2026-100798

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cryptography misuse in Storage: Quota Manager component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

advisories

Advisories Kelly Kaoudis@kaoudis와 친구들의 보안 권고입니다. 일반적으로 공급업체가 패치를 제공한 후 또는 취약점 발견 후 90일이 지난 시점에 이곳에 게시합니다. 즐거운 읽기 되세요! 권고는 발견 순서와 연도별로 번호가 매겨지며, 발견 열거는 0부터 시작합니다...

Linux Distros Unpatched Vulnerability : CVE-2026-98075

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: reject BPFPSEUDOFUNC reference to the main program fixups.c:jitsubprogs rewrites BPFPSEUDOFUNC loads to contain real function addresses. This function is...

Linux Distros Unpatched Vulnerability : CVE-2026-97764

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - django-allauth before 65.19.4 does not have the expected limits on failed login attempts because, in some common configurations, an attacker can leverage the...

Linux Distros Unpatched Vulnerability : CVE-2026-93261

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - locking/lockdep: Fix NULL pointer dereference in locksetclass registerlockclass can return NULL when the lock class pool is exhausted, graphlock fails, or key...

Linux Distros Unpatched Vulnerability : CVE-2026-93825

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: Add NULL check for spigetdeviceid in spigetdevicematchdata Prevent NULL pointer dereference when spigetdeviceid returns NULL, which can happen when using...

Linux Distros Unpatched Vulnerability : CVE-2026-92016

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156,...

Linux Distros Unpatched Vulnerability : CVE-2026-95316

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unchecked return value in Performance in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially read memory via a local program. Chromium...

Linux Distros Unpatched Vulnerability : CVE-2026-95330

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper state validation in Downloads. CVE-2026-95330 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C...

Linux Distros Unpatched Vulnerability : CVE-2026-75893

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In osmo-bsc from 1.0.1 through 1.14.1 a heap based buffer overflow issue was found in the ipaccessproxyreadmsg function via IPA frame lengths. CVE-2026-75893 No...

Linux Distros Unpatched Vulnerability : CVE-2026-93060

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/msm/adreno: fix use after free on error path in a6xxgpuinit The a6xxdestroy function fre...

Linux Distros Unpatched Vulnerability : CVE-2026-90120

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - irqchip/gic-v5: Check getlogicalindex return value in MADT IAFFID parsing In gicacpiparseiaffid a given MADT GICC entry might not correspond to a logical cpu...

Linux Distros Unpatched Vulnerability : CVE-2026-90139

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse: check for NULL root inode in fusefillsupersubmount fuseiget can return NULL when its inode allocation fails, but fusefillsupersubmount passed the result...