41110 matches found
CVE-2026-74558
A flaw was found in the Linux kernel's zero-copy ZC transmit Tx batch path. When processing network packets, the system can fail to properly reclaim memory UMEM frames if it encounters invalid or oversized packet descriptors. This can lead to resource exhaustion, where memory is not returned to...
Aquatronica Controller System <= 5.1.6 - Information Disclosure
Aquatronica Controller System firmware 5.1.6 and earlier and web interface 2.0 and earlier contain an information disclosure vulnerability caused by unauthenticated access to tcp.php endpoint, letting remote attackers retrieve sensitive configuration data including plaintext credentials, exploit...
Open WebUI 'LDAP Empty Password' - Authentication Bypass
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the LDAP authentication endpoint does not validate that the submitted password is non-empty before performing a Simple Bind against the LDAP server. The LdapForm Pydantic model accep...
Dify User Enumeration via Observable Response Discrepancy
Dify is an open-source LLM app development platform. Prior to 1.9.0, responses from the Dify API to existing and non-existent accounts differ, allowing an attacker to enumerate email addresses registered with Dify. Version 1.9.0 fixes the issue. id: CVE-2026-28288 info: name: Dify User Enumeratio...
Gogs <= 0.13.3 - Remote Code Execution
Gogs self-hosted Git service versions 0.13.3 and earlier contain a critical symlink bypass vulnerability that circumvents the fix for CVE-2024-55947. Authenticated users can exploit improper symbolic link handling in the PutContents API to overwrite files outside the repository by committing a...
CVE-2026-63117
A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. An authenticated Remote Desktop Protocol RDP client can trigger a denial of service by sending a specially crafted DVI ADPCM frame. By advertising specific nBlockAlign and nChannels values, a division-by-zero error...
CVE-2026-63117
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, an authenticated RDP client can advertise DVI ADPCM with nBlockAlign equal to 8 and nChannels equal to 2 to make the bs calculation in rdpsndserverselectformat in channels/rdpsnd/server/rdpsndmain.c equal zero. The...
CVE-2026-63117 FreeRDP: Denial of service through ADPCM frame size calculation
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, an authenticated RDP client can advertise DVI ADPCM with nBlockAlign equal to 8 and nChannels equal to 2 to make the bs calculation in rdpsndserverselectformat in channels/rdpsnd/server/rdpsndmain.c equal zero. The...
EUVD-2026-62670
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, an authenticated RDP client can advertise DVI ADPCM with nBlockAlign equal to 8 and nChannels equal to 2 to make the bs calculation in rdpsndserverselectformat in channels/rdpsnd/server/rdpsndmain.c equal zero. The...
CVE-2026-72394
A flaw was found in the Linux kernel's aspeed-g6-pwm-tach driver. This vulnerability arises when the system attempts to calculate fan rotations per minute RPM using a tachometer value of zero, which can occur due to hardware glitches or specific conditions. Without proper validation, this zero...
CVE-2026-72414
A flaw was found in the Linux kernel's net: dsa: sja1105 component. This vulnerability occurs when processing specific timing parameters, where very small user-provided values are converted to zero. This incorrect conversion can lead to a division-by-zero error in the futurebasetime function, whi...
CVE-2026-72343
A flaw was found in the net/mlx5e component of the Linux kernel. A zero-sized buffer is allocated during the initialization of HV VHCA statistics. When the hypervisor later attempts to enable statistics reporting, a write operation is performed on this invalid memory address. This can lead to a...
MINI-GVMC-PMPP-J9VQ
Bulletin has no description...
ROOT-OS-UBUNTU-2404-CVE-2025-21881 CVE-2025-21881 in linux - Patched by Root
Root has patched CVE-2025-21881 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-38190 CVE-2025-38190 in linux - Patched by Root
Root has patched CVE-2025-38190 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-68188 CVE-2025-68188 in linux - Patched by Root
Root has patched CVE-2025-68188 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2026-31431 CVE-2026-31431 in linux - Patched by Root
Root has patched CVE-2026-31431 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-39681 CVE-2025-39681 in linux - Patched by Root
Root has patched CVE-2025-39681 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...