OESA-2026-1996 sudo security update

Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done. Security Fixes: In Sudo through 1.9.17p2 before 3e474c2, a failure of a setui...

CVE-2026-40894

creationtimestamp| type| source ---|---|--- 2026-04-25 03:10:25+00:00| seen| https://bsky.app/profile/startdebugging.bsky.social/post/3mkc2wk6mhx2a...

CVE-2025-50229

Jizhicms v2.5.4 is vulnerable to SQL injection in the product editing module...

CVE-2026-41043

creationtimestamp| type| source ---|---|--- 2026-04-23 18:25:08+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mk6n4dcaab2j...

CVE-2026-21841

creationtimestamp| type| source ---|---|--- 2026-04-23 18:19:41+00:00| seen| https://bsky.app/profile/eyalestrin.bsky.social/post/3mk6mslzmsa24...

CVE-2026-39440

creationtimestamp| type| source ---|---|--- 2026-04-23 15:16:16+00:00| published-proof-of-concept| Telegram/GpzWIna0u4Xk2Mxyx7IImpynDcGXZQ8MHW9U4L55IHFQ 2026-04-23 16:35:18+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mk6gxwkn622a 2026-04-23 19:43:50+00:00| seen|...

CVE-2009-1285

creationtimestamp| type| source ---|---|--- 2026-04-22 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mk4fgsuhew2t...

CVE-2026-31432

creationtimestamp| type| source ---|---|--- 2026-04-22 14:17:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116448784012557105...

CVE-2026-31445

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid use of half-online-committed context One major usage of damoncall is online DAMON parameters update. It is done by calling damoncommitctx inside the damoncall callback function. damoncommitctx can fail for tw...

UBUNTU-CVE-2026-31520

In the Linux kernel, the following vulnerability has been resolved: HID: apple: avoid memory leak in applereportfixup The applereportfixup function was returning a newly kmemdup-allocated buffer, but never freeing it. The caller of reportfixup does not take ownership of the returned pointer, but ...

CVE-2026-5816

creationtimestamp| type| source ---|---|--- 2026-04-22 12:50:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jwdl7pl2u 2026-04-22 18:19:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk44cuqcde2c 2026-04-22 19:00:19+00:00| seen|...

CVE-2025-3922

creationtimestamp| type| source ---|---|--- 2026-04-22 12:50:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jwdl7pl2u 2026-04-24 07:57:51+00:00| seen| https://ccb.belgium.be/advisories/warning-11-new-vulnerabilities-gitlab-ce-and-ee-editions-patch-immediately...

CVE-2026-6246

creationtimestamp| type| source ---|---|--- 2026-04-22 12:37:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3j74ii6v2n 2026-04-25 07:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkcjmakig72s...

CVE-2026-40450

creationtimestamp| type| source ---|---|--- 2026-04-22 08:29:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk33exhwe62n...

CVE-2026-22748

creationtimestamp| type| source ---|---|--- 2026-04-22 08:26:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk336shaxa2p 2026-04-22 12:45:24+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jnvyvfq2h...

GHSA-XX5W-CVP6-JV83 vulnerabilities

Vulnerabilities for packages: wasmcloud, wizer, zed, yara-x...

CVE-2026-41665

Integer overflow in scratch buffer initialization size calculation in Samsung Open Source ONE cause incorrect memory initialization for large intermediate tensors. Affected version is prior to commit 1.30.0...

GHSA-CCQ9-R5CW-5HWQ

creationtimestamp| type| source ---|---|--- 2026-04-22 01:18:49+00:00| published-proof-of-concept| Telegram/AsK9uQCoE0LPzwbkNe8abRZIpzVzCCIAKmN05DDH2W6pw...

GHSA-793Q-XGJ6-7FRP

creationtimestamp| type| source ---|---|--- 2026-04-22 01:18:49+00:00| published-proof-of-concept| Telegram/AsK9uQCoE0LPzwbkNe8abRZIpzVzCCIAKmN05DDH2W6pw...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013414)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013414 advisory. A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is an unknown function of the file mm/memory.c of the component Driver...