2026

In the Linux kernel, the following vulnerability has been resolved: serial: amba-pl011: synchronize DMA teardown dmaen

In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix bandwidth group reservation indexi

In the Linux kernel, the following vulnerability has been resolved: ovpn: ensure socket is owned by ovpn before deref s

In the Linux kernel, the following vulnerability has been resolved: btrfs: initialize inode mapping flags for cached in

In the Linux kernel, the following vulnerability has been resolved: ata: pata_sl82c105: fix bridge revision use-after-f

In the Linux kernel, the following vulnerability has been resolved: net: remove CAP_SYS_RAWIO zero-padding in dev_valid

A vulnerability has been identified in Mendix SAML (Mendix 10 compatible) (All versions < V4.2.4), Mendix SAML (Mendix 1

Use of Weak Credentials vulnerability in B&R Industrial Automation GmbH mapp Audit used in mapp Services. This issue af

util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit status before running post-mount hooks, al

Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a stack buffer overflow vulnerability in file-level

A stack out-of-bounds write vulnerability was found in gfs2-utils. In savemeta, the height value from on-disk inode meta

A stack out-of-bounds write vulnerability was found in gfs2-utils. In gfs2_edit, the di_height field from on-disk inode

HDD password plaintext is stored in a UEFI variable.

An uncontrolled recursion issue exists in Amazon Ion-C versions before 1.1.6 that might allow a remote unauthenticated a

fast-uri accepts a host that contains an unbalanced or misplaced authority bracket without reporting an error. A host th

fast-uri serializes the port component of a URI without validating it. When recomposing the authority, the userinfo and

UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated administrators to uplo

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the e

A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI fl

Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially result

A security flaw has been discovered in tsi-coop tsi-dpdp-cms up to 0.5.0. This vulnerability affects unknown code. The m

HTTPX2 is a next generation HTTP client for Python. Prior to 2.12.0, the HTTPX2 content decoders in src/httpx2/httpx2/_d

HTTPX2 is a next generation HTTP client for Python. Prior to 2.10.0, httpcore2 fails to start TLS in src/httpcore2/httpc

A vulnerability was identified in Sonatype Nexus Repository 3 in which two blobstore group management REST API endpoints

In affected versions of Nexus Repository 3, the script execution endpoint (POST /service/rest/v1/script/{name}/run) did

DSpace open source software is a repository application which provides durable access to digital resources. From version

TOON is a compact, human-readable serialization of JSON data for LLM prompts. Prior to 2.3.1, decoding attacker-controll

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, on the Nuclio loca

Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 59bb6d6, the view

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.5, Nuclio's Java runt

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.4, the Nuclio control

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.0, there is a vulnera

A vulnerability in Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 that ar

As part of Cisco's ongoing commitment to proactive security and product quality, the&nbsp;Cisco IOS XR Software engineer

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering t

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering t

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering t

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering t

A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker to execute arbitrary com

A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename o

OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build en

Jenkins Customizable Header Plugin 295.v2544b_ca_19b_97 and earlier allows overwriting the plugin's appearance configura

Jenkins Microsoft Entra ID (previously Azure AD) Plugin 710.v0b_ff8e9cc2d2 and earlier grants Entra group permissions us

Jenkins File Parameter Plugin 425.v3fa_801681b_5e and earlier allows writing files to arbitrary locations on the Jenkins

Jenkins Performance Plugin 1015.v09ca_52b_3370e and earlier does not restrict the classes that can be instantiated when

A path traversal vulnerability in Jenkins Allure Plugin 2.35.2 and earlier allows attackers with Item/Read permission on

Jenkins SAML Plugin 4.618.v441a_27fa_46d2 and earlier allows overwriting the SAML identity provider metadata file throug

Jenkins ThinBackup Plugin 2.1.4 and earlier allows overwriting the plugin's backup configuration through Stapler data bi

Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based