4281 matches found
CVE-2026-23194
In the Linux kernel, the following vulnerability has been resolved: rustbinder: correctly handle FDA objects of length zero Fix a bug where an empty FDA fd array object with 0 fds would cause an out-of-bounds error. The previous implementation used skip == 0 to mean "this is a pointer fixup", but...
CVE-2026-25765 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, cinc-auditor, logstash, gitlab-rails-ce-fips, gitlab-cng, kube-fluentd-operator, kube-logging-operator...
CVE-2026-23121
A flaw was found in the Linux kernel's mISDN timer device. A local user with low privileges could exploit a data race condition around the dev-work flag. This can lead to incorrect wakeup logic, causing processes to block longer than expected or experience missed notifications, ultimately resulti...
Advisory ROSA-SA-2026-3134
Software: flac 1.3.2 OS: ROSA Virtualization 2.1 unaffected versions = flac-1.3.2-9.rv3.1 affected versions flac-1.3.2-9.rv3.1 CVE-ID: CVE-2020-22219 BDU-ID: 2023-06152 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the bitwritergrow in function of the FLAC audio codec is related to an operation...
CVE-2025-71220
In the Linux kernel, the following vulnerability has been resolved: smb/server: call ksmbdsessionrpcclose on error path in createsmb2pipe When ksmbdiovpinrsp fails, we should call ksmbdsessionrpcclose...
Siemens SIMATIC S7-1500 Out-of-bounds Write (CVE-2025-39783)
In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Fix configfs group list head handling Doing a listdel on the epfgroup field of struct pciepfdriver in pciepfremovecfs is not correct as this field is a list head, not a list entry. This listdel call triggers a KASA...
CVE-2026-20628
creationtimestamp| type| source ---|---|--- 2026-02-15 04:56:02+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3meuqnsutes2w...
CVE-2026-23168 flex_proportions: make fprop_new_period() hardirq safe
In the Linux kernel, the following vulnerability has been resolved: flexproportions: make fpropnewperiod hardirq safe Bernd has reported a lockdep splat from flexible proportions code that is essentially complaining about the following race: runtimersoftirq - we are in softirq context calltimerfn...
CVE-2025-14852 MDirector Newsletter <= 4.5.8 - Cross-Site Request Forgery to Plugin Settings Update
The MDirector Newsletter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.5.8. This is due to missing nonce verification on the mdirectorNewsletterSave function. This makes it possible for unauthenticated attackers to update the plugin's...
Linux Distros Unpatched Vulnerability : CVE-2025-71222
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: wlcore: ensure skb headroom before skbpush This avoids occasional skbunderpanic Oops from wl1271txwork. In this case, headroom is less than needed typical...
CVE-2025-68128
reserved but not needed...
CVE-2026-23112
In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds checks in nvmettcpbuildpduiovec nvmettcpbuildpduiovec could walk past cmd-req.sg when a PDU length or offset exceeds sgcnt and then use bogus sg-length/offset values, leading to copytoiter GPF/KASAN. Guard...
GHSA-XP79-9MXW-878J
creationtimestamp| type| source ---|---|--- 2026-02-13 12:10:23+00:00| seen| https://gist.github.com/alon710/9e4011e4a5d04506e2bb1497bf4b9849...
CVE-2026-20623
A permissions issue was addressed by removing the vulnerable code. This issue is fixed in macOS Tahoe 26.3. An app may be able to access protected user data...
CVE-2025-14892
creationtimestamp| type| source ---|---|--- 2026-02-12 15:51:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meoduqr3gn2h...
CVE-2026-22925
creationtimestamp| type| source ---|---|--- 2026-02-12 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-08 2026-05-12 11:10:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlnnpb2huu2n 2026-05-12 11:46:57+00:00| seen|...
CVE-2025-8668
creationtimestamp| type| source ---|---|--- 2026-02-12 09:10:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mennhrmy3f2x 2026-02-12 13:45:37+00:00| seen| https://bsky.app/profile/postacc.bsky.social/post/3meo4u3dtos2z 2026-02-12 13:50:55+00:00| seen|...
CVE-2026-23857
creationtimestamp| type| source ---|---|--- 2026-02-12 07:01:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mengbtwaw22g 2026-02-12 13:00:33+00:00| seen| https://infosec.exchange/users/offseq/statuses/116057783104911228 2026-02-12 13:00:34+00:00| seen|...