101052 matches found
cve-2019-2215_SH-M08
This is a port of the proof-of-concept code for obtaining root privileges on Android devices with security patches prior to October 2019, ported to AQUOS sense 2 SH-M08. Operating Environment Operation has been confirmed on the following OS versions. To run on other versions or other devices,...
GhostLock-GOT-W29
CVE-2026-43499 GhostLock — HUAWEI MatePad Pro 11 GOT-W29 Privilege escalation research on CVE-2026-43499 rtmutex/futex-PI stack UAF, "GhostLock" for the GOT-W29 HarmonyOS 4.0, kernel 4.19.157-perf+. Final Conclusions 1. The vulnerability is real and triggerable : a value-holding PI cycle makes...
RLSA-2026:84744 Important: gimp:2.8 security update
The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fixes: gimp: gimp:...
gimp:2.8 security update
An update is available for gimp, module.gimp, pygtk2, python2-pycairo, module.pygtk2, module.python2-pycairo, pygobject2, module.pygobject2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
PT-2026-118288
A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system...
PT-2026-120142
Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data version 5.4.0.0 Description An unauthenticated user can perform an arbitrary write into the shared Redis instance under any tenant's key. This issue breaks the credential-encryption boundary of the platform,...
PT-2026-118494
Name of the Vulnerable Software and Affected Versions import-export versions prior to 3.7.1 ApostropheCMS versions prior to 4.34.0 Description An editor with permissions to import an enabled content type, but lacking the required publication role, can bypass normal publish permissions and lifecyc...
PT-2026-118997
Out of bounds write in Forms in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...
Linux Distros Unpatched Vulnerability : CVE-2026-98867
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-pcache: bound the logical key offset from persistent memory cachekeydecode takes a key's logical off from the cache device and later indexes...
RockyLinux 9 : postgresql:16 (RLSA-2026:85791)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:85791 advisory. pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build CVE-2026-103484 Tenable has extracted the preceding description...
Linux Distros Unpatched Vulnerability : CVE-2026-98673
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: adc: pac1934: check ACPI label duplication A label duplication failure currently reaches the terminating-byte write. Release the ACPI result and abort befo...
ALSA-2026:85791 Important: postgresql:16 security update
PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build CVE-2026-103484 For more details about the security issues, including the impact, a CVSS score,...
postgresql:16 security update
pgaudit 16.0-1 - Update to 16.0 - Support postgresql 16 - Initial import for PG 16 module - Resolves: RHEL-3635 pgrepack 1.5.1-1 - Update to v1.5.1 1.4.8-2 - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47604 1.4.8-1 - Resolves: RHEL-3636 - Initial import for PG 16...
ALSA-2026:85814 Important: postgresql:18 security update
PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build CVE-2026-103484 For more details about the security issues, including the impact, a CVSS score,...
Linux Distros Unpatched Vulnerability : CVE-2026-98776
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - binderfs: fix UAF write in binderadddevice binderfsbinderdevicecreate publishes the new dentry with dmakepersistent and then calls simpledonecreating, which dro...
PT-2026-118473
Unpatched vulnerabilities don't stay hidden on our atlas. CVE CRITICAL VULNERABILITY DETECTED CVE ID: CVE-2026-113613 Vendor: Unknown Severity: Critical — CVSS 9.2 Product: Unknown Date: 2026-10-20 A critical vulnerability Path Traversal has been disclosed affecting Unknown. Patch immediately...
Linux Distros Unpatched Vulnerability : CVE-2026-98545
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ata: libata-scsi: bound the ATA passthru sense descriptor writes When an ATA PASS-THROUGH command to an ATAPI device fails, the sense buffer holds the device's...
Linux Distros Unpatched Vulnerability : CVE-2026-70007
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds write in .NET Framework allows an unauthorized attacker to execute code over a network. CVE-2026-70007 Note that Nessus relies on the presence of...
PT-2026-118336
uTox through 0.18.1 contains a path traversal vulnerability that allows Tox friends to write arbitrary files by sending absolute or ../ file names to victims with auto-accept enabled. Attackers can overwrite shell startup files or plant crafted .ftinfo resume records that ft find resumeable loads...