2026

In the Linux kernel, the following vulnerability has been resolved: spi: topcliff-pch: fix use-after-free on unbind Gi

In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix held lock freed on hfsplus_fill_super(

In the Linux kernel, the following vulnerability has been resolved: pseries/papr-hvpipe: Fix race with interrupt handle

In the Linux kernel, the following vulnerability has been resolved: net: libwx: use request_irq for VF misc interrupt

In the Linux kernel, the following vulnerability has been resolved: spi: s3c64xx: fix NULL-deref on driver unbind A ch

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Do IRR scan in __kvm_apic_update_irr even

In the Linux kernel, the following vulnerability has been resolved: dm: fix a buffer overflow in ioctl processing Tony

In the Linux kernel, the following vulnerability has been resolved: clk: microchip: mpfs-ccc: fix out of bounds access

In the Linux kernel, the following vulnerability has been resolved: pmdomain: core: Fix detach procedure for virtual de

In the Linux kernel, the following vulnerability has been resolved: crypto: caam - guard HMAC key hex dumps in hash_dig

In the Linux kernel, the following vulnerability has been resolved: x86/efi: Fix graceful fault handling after FPU soft

In the Linux kernel, the following vulnerability has been resolved: lib/scatterlist: fix length calculations in extract

In the Linux kernel, the following vulnerability has been resolved: of: unittest: fix use-after-free in of_unittest_cha

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix RTNL assertion warning when remove

In the Linux kernel, the following vulnerability has been resolved: leds: qcom-lpg: Check for array overflow when selec

In the Linux kernel, the following vulnerability has been resolved: mtd: docg3: fix use-after-free in docg3_release()

In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix early boot crash on parameters with

In the Linux kernel, the following vulnerability has been resolved: tpm: Use kfree_sensitive() to free auth session in

In the Linux kernel, the following vulnerability has been resolved: iio: frequency: admv1013: fix NULL pointer derefere

In the Linux kernel, the following vulnerability has been resolved: vmalloc: fix buffer overflow in vrealloc_node_align

In the Linux kernel, the following vulnerability has been resolved: lib: test_hmm: evict device pages on file close to

In the Linux kernel, the following vulnerability has been resolved: mm/alloc_tag: clear codetag for pages allocated bef

In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix segfault when updating ftrace

In the Linux kernel, the following vulnerability has been resolved: mm/zone_device: do not touch device folio after cal

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix zero-size GDS range init on RDNA4

fabric-chaincode-java is a Java based implementation of Hyperledger Fabric chaincode shim APIs. From version 2.3.1 to be

Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in ninenines

AdGuard Home, when started with the --glinet flag, contains an authentication bypass vulnerability that allows unauthent

STACKIT IaaS API contains a missing authorization check in the PUT servers service-accounts endpoint. An authenticated,

OpenBullet2 through version 0.3.2 on Windows contains a credential disclosure vulnerability that allows remote attackers

OpenBullet2 through version 0.3.2 contains an authenticated remote code execution vulnerability that allows authenticate

OpenBullet2 through version 0.3.2 contains a remote code execution vulnerability that allows authenticated users to exec

OpenBullet2 through version 0.3.2 contains a path traversal vulnerability in the wordlist endpoint that allows authentic

OpenBullet2 through version 0.3.2 contains an authentication bypass vulnerability in the API key authentication middlewa

A flaw was found in 389 Directory Server. The Content Synchronization persistent search plugin allows unbounded memory g

A vulnerability was detected in imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46. Affec

A security vulnerability has been detected in imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd48

A weakness has been identified in imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46. Aff

A security flaw has been discovered in imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46

A vulnerability was identified in imvks786 student_management_system up to 9599b560ad3c3b83e75d328b76bedcd489ef1f46. Thi

Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service vi

Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in wojtekmach Req allows multipart parameter

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in wojtekmach Req allows attacker-control

Use After Free vulnerability in Apache HTTP Server module mod_http2 when file handles are already exhausted. This issue

phpMyFAQ is an open source FAQ web application. Prior to version 4.1.4, attachment passwords are hashed using SHA-1, a c

Bludit is a content management system. Versions prior to 3.22.0 have a vulnerability in the user management logic that a

Bludit is a content management system. Versions prior to 3.22.0 have a Broken Access Control flaw where active sessions

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, evaluat

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, evaluat

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, Dataset