Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability that arises from empty pointer dereferencing or corrupted reference counting when devpasid is not found in the devpasids list. This can lead to reuse after deallocation. The following versions are affected: 6.12.57, 6.13.3, and 6.14...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.8 contains security vulnerabilities. These vulnerabilities stem from an integer truncation issue in the accel/ivpu IPC reception process. Forcing the data size provided by the firmware to a signed int may lead to a buffer overflow...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability, which stems from a race condition in the drm/gem module’s changehandle ioctl function. This issue may lead to handle processing errors...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.2 contains security vulnerabilities. These vulnerabilities stem from the ACK parser in rxrpc, which makes modifications to the skb during the extraction of the SACK table and potentially leads to incorrect access to buffers in fragmented UDP packets, resulting in...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.10 contains a security vulnerability. This vulnerability stems from a lack of lower bound checking in the isertloginrecvdone function located in drivers/infiniband/ulp/isert/ibisert.c. When calculating the length of the login request payload, no lower bound check is...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability, which stems from the NAT hook in the netfilter component failing to release ops through kfreercu at the wrong path, potentially causing issues when using dump hooks in the user space...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability arises from the network layer’s improper handling of GSO packets, resulting in the failure to correctly retrieve header data. This can lead to the driver reading invalid memory, allowing attackers to trigger a denial-of-service...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability caused by a race condition issue, which may lead to reusing resources after release...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from a problem with the use of reclaimed resources in the unixstreambpfupdateproto function, which may lead to an increase in local privileges...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.13 contains security vulnerabilities. These vulnerabilities stem from the bonding driver’s improper implementation of RCU rules in 3ad mode, which may lead to data races...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the drm/xe/dma-buf module not properly handling the release of objects during the retry loop, which may lead to reuse after release...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.8 contains security vulnerabilities. These vulnerabilities stem from race conditions in the drm/xe/dma-buf code, which handle empty buffers and reusing after release. This could allow attackers to trigger reusing after release or null pointer dereferencing...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability that stems from the incorrect number of bytes used during the recovery of the IV in the ccpaescomplete function, which can lead to a buffer overflow. The following versions are affected: 3.14...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.15 contains security vulnerabilities. These vulnerabilities stem from SCTP’s improper handling of Stale Cookies, where it fails to properly clean up the output queue and invalidates the scheduler’s cache pointers, potentially leading to reuse after release...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.17 contains security vulnerabilities. These vulnerabilities stem from the futex subsystem, which violates strict pthread semantics when handling private default hash allocations. The misuse of CLONETHREAD leads to issues where shared memory is reclaimed and reused after...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.7 contains security vulnerabilities. These vulnerabilities stem from the fact that the open-coded taskvma iterator does not call mmget to obtain the mm reference. This can lead to the release of the mmstruct during task concurrency exits, resulting in a reuse after...

Linux Kernel Security Vulnerabilities

The Linux kernel versions from 6.12.34 to 6.12.74 contain security vulnerabilities. This vulnerability arises from the use of Threaded NAPI in WireGuard devices, which causes the decryption process to completely stop under high network load, potentially leading to a denial-of-service attack...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the fact that the SCTP protocol stack does not disable the lower half of the Bluetooth Header before calling udptunnelxmitskb. This may lead to unbalanced operations of devxmitrecursioninc/dec on different CPUs, resultin...

Linux Kernel Security Vulnerabilities

The Linux kernel version 6.11 contains a security vulnerability. This vulnerability arises from the regsafe function, which does not verify the consistency of base IDs when comparing scalar registers with BPFADDCONST. This may lead to state pruning errors, thereby allowing the creation of...

Linux Kernel Security Vulnerabilities

The Linux kernel version 4.15 contains security vulnerabilities. These vulnerabilities stem from a double release issue in the tipcbuf.Append function, which may lead to memory corruption...

CyberArk Idira Privileged Session Manager path traversal vulnerability

CyberArk Idira Privileged Session Manager is a privileged session management platform developed by the American company CyberArk. Versions of CyberArk Idira Privileged Session Manager prior to 15.0.3, 14.6.3, 14.2.5, and 14.0.5 contained a path traversal vulnerability. This vulnerability stemmed...

Netty resource management error vulnerability

Netty is a non-blocking I/O client-server framework from the Netty community. It is primarily used for developing Java network applications, such as protocol servers and clients. Versions of Netty prior to 4.1.135.Final and 4.2.15.Final contained a resource management vulnerability. This...

Netty resource management error vulnerability

Netty is a non-blocking I/O client-server framework from the Netty community. It is primarily used for developing Java network applications, such as protocol servers and clients. Versions of Netty prior to 4.1.135.Final and 4.2.15.Final contained a resource management vulnerability. This...

Google Chrome security vulnerabilities

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.115 contained a security vulnerability caused by a heap buffer overflow in the GPU. This vulnerability could allow a remote attacker with access to the renderer process to execute a sandbox escap...

Axios server-side request forge vulnerability

Axios is an open-source HTTP client developed by Axios, based on Promise a solution for asynchronous programming. There were code-related vulnerabilities in versions of Axios before 0.32.0 and 1.16.0. These vulnerabilities stemmed from unnormalized IPv4-to-Ipv6 address mappings, which could lead ...

Certificate handling for haskell security vulnerabilities

Certificate Handling for Haskell is a X509 certificate processing and verification tool developed by Kazu Yamamoto. There are security vulnerabilities in Certificate Handling for Haskell. These vulnerabilities stem from the lack of enforcement of X.509 name constraints. This may allow TLS clients...

IBM Langflow Desktop code-related vulnerabilities

IBM Langflow Desktop is a desktop application for AI process orchestration developed by IBM. Versions 1.0.0 to 1.9.2 of IBM Langflow Desktop have code vulnerabilities. These vulnerabilities are due to susceptibility to server-side request forgeing attacks, which may allow authenticated attackers ...

IBM Security QRadar EDR security vulnerabilities

IBM Security QRadar EDR is a terminal detection and response software developed by the American multinational company IBM. There are security vulnerabilities in versions 3.12 to 3.12.24 of IBM Security QRadar EDR. These vulnerabilities stem from the storage of user credentials in plain text, whic...

OpenClaw security vulnerabilities

OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.5.18 contained security vulnerabilities. These vulnerabilities stemmed from the fact that extension metadata during market runtime could be redirected to load into unscanned packa...

OpenClaw security vulnerabilities

OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.5.12 contained security vulnerabilities. These vulnerabilities stemmed from shell option parsing; combining POSIX shell flags could bypass the exec revalidation check. Attackers c...

OpenClaw: Permissions, licensing, and access control issues

OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.5.20 contained security vulnerabilities. These vulnerabilities were caused by permission escalation issues, where hooks triggered proxy operations that incorrectly received MCP...

Vim input validation vulnerability

Vim is an open-source, cross-platform text editor developed by Vim developers. Versions of Vim prior to 9.2.0495 contained a vulnerability due to the netrw plugin. This vulnerability stemmed from the s:NetrwBookHistSave function in the netrw plugin, which inserted directory names derived from the...

Apple’s various products have vulnerabilities related to access control.

Apple iOS, among others, are products of the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple macOS is a specialized operating system designed for Mac computers. Apple iPadOS is an operating system for iPad tablets. Several of Apple’s products have...

Apple macOS Backlink Vulnerability

Apple macOS is a proprietary operating system developed by the American company Apple for Mac computers. Versions of Apple macOS Sequoia 15.4 and earlier contained a backlink vulnerability, which was caused by improper handling of symbolic links. This vulnerability could allow applications to...

Apple macOS Access Control Error Vulnerability

Apple macOS is a proprietary operating system developed by the American company Apple for Mac computers. Versions of Apple macOS Tahoe 26.1 and earlier contained an access control error vulnerability. This vulnerability stemmed from an access issue that could allow malicious applications to acces...

MCP Server Kubernetes security vulnerabilities

MCP Server Kubernetes is a Kubernetes management server developed by Suyog Sonwalkar. Versions of MCP Server Kubernetes prior to 3.6.0 contained security vulnerabilities. These vulnerabilities stemmed from access control being executed at the tool discovery layer but not at the execution layer,...

Quest Bot security vulnerabilities

Quest Bot is a multi-functional Discord community management robot developed by Duck Organization. Versions of Quest Bot prior to 1.0.3 contained security vulnerabilities. These vulnerabilities stemmed from users who had access to manage servers but did not have management roles or administrator...

389 Directory Server: Input validation error vulnerability

389 Directory Server is an open-source implementation of a highly available, fully functional, reliable, and secure LDAP server. 389 Directory Server has a vulnerability related to input validation. This vulnerability stems from an integer overflow in the SASL I/O layer. In the function...

Apple macOS security vulnerabilities

Apple macOS is a proprietary operating system developed by the American company Apple for Mac computers. Versions of Apple macOS Sequoia 15.4 had a security vulnerability due to improper handling of symbolic links, which could allow applications to access protected user data...

Apple macOS security vulnerabilities

Apple macOS is a proprietary operating system developed by the American company Apple for Mac computers. Versions of Apple macOS Sequoia 15.4 had a security vulnerability due to insufficient checks. This vulnerability could allow applications to bypass startup restriction protections and execute...

Hermes Web UI Access Control Vulnerability

Hermes Web UI is a lightweight, dark-themed web interface developed by Nathan Esquenazi. Versions of Hermes Web UI prior to 0.51.358 contained an access control vulnerability. This vulnerability stemmed from improper access control measures, allowing unauthorized remote attackers to initial...

CyberArk Idira Secrets Manager SaaS Edge Access Control Vulnerability

CyberArk Idira Secrets Manager SaaS Edge is a distributed confidential access node component offered by the American company CyberArk. Versions of CyberArk Idira Secrets Manager SaaS Edge prior to version 1.8 contained an access control vulnerability. This vulnerability stemmed from improper acce...

CyberArk Idira Endpoint Privilege Manager security vulnerability

CyberArk Idira Endpoint Privilege Manager is a terminal privilege management agent developed by the American company CyberArk. Vulnerabilities existed in versions of CyberArk Idira Endpoint Privilege Manager prior to version 26.5. These vulnerabilities stemmed from improper access control in the...

Kong Gateway Enterprise environmental issues and vulnerabilities

Kong Gateway Enterprise is an enterprise-level API gateway platform developed by Kong Corporation. Versions 3.4, 3.10, 3.11, 3.12, 3.13, and 3.14 of Kong Gateway Enterprise contain environmental issues vulnerabilities. These vulnerabilities stem from defects in the HTTP request processing pipelin...

Check Point Identity Agent Full code issue vulnerability

Check Point Identity Agent Full is a terminal identity awareness agent developed by Check Point Technologies. There is a code vulnerability in Check Point Identity Agent Full, which stems from improper handling of executable file parsing during log collection. This vulnerability may allow...

Limatek LimRAD NAC code issue vulnerability

Limatek LimRAD NAC is a network access control system developed by the Turkish company Limatek. Versions of Limatek LimRAD NAC prior to 5.5.7.3.9 contained code vulnerabilities. These vulnerabilities stemmed from an unlimited upload of dangerous types of files, which could lead to remote code...

Gatus security vulnerabilities

Gatus is a service health monitoring and alerting tool developed by TwiN’s individual developers. Version 5.36.0 of Gatus contains a security vulnerability. This vulnerability stems from the setSessionCookie function in the OIDC session cookie handler. Performing certain operations may result in...

Neuron Golem OEE MES path traversal vulnerability

Neuron Golem OEE MES is a manufacturing execution system and equipment integrated efficiency management platform developed by the Polish company Neuron. The Neuron Golem OEE MES has a path traversal vulnerability, which stems from a path traversal flaw. This vulnerability could allow attackers...

Guzzle Services: Input validation vulnerability

Guzzle Services is an open-source client tool built on service descriptions for making HTTP requests. Prior to version 1.5.4 of Guzzle Services, there was a vulnerability related to input validation errors. This vulnerability occurred when the XML request serializer used XMLWriter::writeCData$val...

Guzzle input validation vulnerability

Guzzle is a PHP HTTP client developed by the guzzlehttp developer. It allows for easy sending of HTTP requests and seamless integration with web services. Prior to Guzzle 2.10.2, there was a vulnerability related to input validation errors. This vulnerability stemmed from improper validation of...