1,460 results · Clear filters · Feed
-
Critical max 9.8USN-9058-1 1 CVE
ruby-actionpack-page-caching vulnerability
It was discovered that Action Pack Page Caching incorrectly handled certain request paths when writing cached pages. A remote attacker could possibly use this issue to write arbitrary files to the web server, and possibly execute arbitrary code.
first Nov 11, 2026 -
Critical max 9.4USN-9054-1 1 CVE
node-babel vulnerability
It was discovered that Babel incorrectly evaluated certain code during compilation when used with certain plugins. If a user or an automated system were tricked into compiling specially crafted code, an attacker could possibly use this issue to execute arbitr…
first Nov 11, 2026 -
Critical max 9.8USN-9061-1 2 CVEs
shiro vulnerabilities
It was discovered that Apache Shiro incorrectly handled certain specially crafted requests when used with Spring dynamic controllers. A remote attacker could possibly use this issue to bypass authentication. (CVE-2020-1957, CVE-2020-11989)
first Nov 11, 2026 -
Critical max 9.8USN-9060-1 1 CVE
ruby-kramdown vulnerability
It was discovered that kramdown processed the template option in documents by default. An attacker could possibly use this issue to read arbitrary files or execute arbitrary code.
first Nov 11, 2026 -
Critical max 9.1USN-9059-1 1 CVE
ruby-jwt vulnerability
It was discovered that ruby-jwt incorrectly verified HMAC signatures when the verification key was empty or missing. A remote attacker could possibly use this issue to forge tokens and bypass authentication.
first Nov 11, 2026 -
Critical max 9.3USN-9051-1 1 CVE
libfcgi vulnerability
It was discovered that FastCGI incorrectly handled certain parameter lengths, leading to an integer overflow and a heap-based buffer overflow. An attacker could possibly use this issue to cause applications using FastCGI to crash, resulting in a denial of ser…
first Nov 11, 2026 -
Critical max 9.8USN-9052-1 1 CVE
logback vulnerability
It was discovered that Logback incorrectly handled deserialization of untrusted data in its socket server and receiver components. A remote attacker could possibly use this issue to execute arbitrary code.
first Nov 11, 2026 -
Critical max 10.0
linux-nvidia-tegra vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - NVDIMM (Non-Volatile Memory Device) drivers; - Handshake API; - ARM32 archite…
first Oct 6, 2026 -
Critical max 9.8USN-8724-1 5 CVEs
librabbitmq vulnerabilities
It was discovered that the rabbitmq-c command-line tools only accepted credentials on the command line, making them visible to other local users through the process list. An attacker could possibly use this to obtain sensitive credentials. This issue only aff…
first Sep 3, 2026 -
Critical max 9.3USN-9037-1 10 CVEs
hplip vulnerabilities
It was discovered that HPLIP did not properly handle certain data, which could result in an out-of-bounds write. An attacker could possibly use this issue to cause a denial of service, expose sensitive information or execute arbitrary code. (CVE-2026-91097) I…
first Nov 10, 2026 -
Critical max 9.8USN-9032-1 9 CVEs
linux, linux-aws, linux-aws-fips, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-azure-fips, linux-fips, linux-gcp, linux-gcp-4.15, linux-gcp-fips, linux-hwe, linux-kvm, linux-oracle vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - GPU drivers; - Ethernet bonding driver; - Network drivers; - F2FS file system…
first Nov 10, 2026 -
Critical max 9.1USN-9015-1 39 CVEs
openjdk-21 vulnerabilities
It was discovered that the Security component of OpenJDK 21 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83374) It was discovered that the JSSE component of OpenJDK 21 did not correc…
first Nov 9, 2026 -
Critical max 9.8USN-9031-1 8 CVEs
linux-aws-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - HID subsystem; - InfiniBand drivers; - Network drivers; - PCI subsystem; - SC…
first Nov 10, 2026 -
Critical max 9.8USN-9018-1 379 CVEs
linux, linux-aws, linux-gcp, linux-ibm, linux-oem-7.0, linux-oracle vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file systems library; - Stream parser; - ARM64 architecture; - PowerP…
first Nov 10, 2026 -
Critical max 9.8USN-9028-1 3 CVEs
linux-azure-fde vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - Hardware monitoring drivers; - OCFS2 file system; (CVE-20…
first Nov 10, 2026 -
Critical max 9.8USN-9034-1 18 CVEs
linux-aws vulnerabilities
Demi Marie Obenour and Simon Gaiser discovered that several Xen para- virtualization device frontends did not properly restrict the access rights of device backends. An attacker could possibly use a malicious Xen backend to gain access to memory pages of a gu…
first Nov 10, 2026 -
Critical max 9.8USN-9027-1 5 CVEs
linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-azure, linux-azure-5.15, linux-azure-fde-5.15, linux-azure-fips, linux-gcp, linux-gcp-5.15, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-oracle, linux-oracle-5.15, linux-realtime vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - Hardware monitoring drivers; - OCFS2 file system; - IPv4 …
first Nov 10, 2026 -
Critical max 9.8USN-9033-1 19 CVEs
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
Demi Marie Obenour and Simon Gaiser discovered that several Xen para- virtualization device frontends did not properly restrict the access rights of device backends. An attacker could possibly use a malicious Xen backend to gain access to memory pages of a gu…
first Nov 10, 2026 -
Critical max 9.1USN-9014-1 37 CVEs
openjdk-17 vulnerabilities
It was discovered that the Security component of OpenJDK 17 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83374) It was discovered that the JSSE component of OpenJDK 17 did not correc…
first Nov 9, 2026 -
Critical max 9.8USN-9038-1 6 CVEs
gst-plugins-good1.0, gst-plugins-base1.0 vulnerabilities
It was discovered that GStreamer Good Plugins did not properly handle certain network streams. A remote attacker could possibly use this issue to cause an application crash or execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS…
first Nov 10, 2026 -
Critical max 9.8USN-9035-1 8 CVEs
linux vulnerabilities
Pengfei Wang discovered that the Turtle Beach MultiSound audio device driver in the Linux kernel contained race conditions when fetching from the ring-buffer, leading to an out-of-bounds access. A local attacker could use this to cause a denial of service (sy…
first Nov 10, 2026 -
Critical max 9.8USN-9016-1 17 CVEs
apache2 vulnerabilities
Zhang San, Ankit Prateek, Zhen Kong, SeungHyun Cho, Ryoma Nishioka, Keita Sode and Hyojae Lee discovered that Apache HTTP Server did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service. This i…
first Nov 10, 2026 -
Critical max 9.8USN-9030-1 6 CVEs
linux, linux-aws, linux-aws-fips, linux-azure, linux-azure-5.4, linux-azure-fips, linux-bluefield, linux-fips, linux-gcp, linux-gcp-5.4, linux-gcp-fips, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-xilinx-zynqmp vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - HID subsystem; - InfiniBand drivers; - Network drivers; - PCI subsystem; - JF…
first Nov 10, 2026 -
Critical max 9.1USN-9005-1 40 CVEs
openjdk-27 vulnerabilities
It was discovered that the 2D component of OpenJDK 27 did not correctly authenticate users. A remote attacker could possibly use this issue to cause a denial of service or to read or modify sensitive data. (CVE-2026-91415) It was discovered that the Networkin…
first Nov 9, 2026 -
Critical max 9.1USN-9004-1 41 CVEs
openjdk-25 vulnerabilities
It was discovered that the 2D component of OpenJDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to cause a denial of service or to read or modify sensitive data. (CVE-2026-91415) It was discovered that the Networkin…
first Nov 9, 2026 -
Critical max 9.1USN-9009-1 37 CVEs
openjdk-8 vulnerabilities
It was discovered that the Security component of OpenJDK 8 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83374) It was discovered that the JSSE component of OpenJDK 8 did not correctl…
first Nov 9, 2026 -
Critical max 9.1USN-9010-1 39 CVEs
openjdk-lts vulnerabilities
It was discovered that the Security component of OpenJDK 11 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83374) It was discovered that the JSSE component of OpenJDK 11 did not correc…
first Nov 9, 2026 -
Critical max 10.0USN-8575-1 758 CVEs
linux, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-realtime, linux-xilinx-zynqmp vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when…
first Jul 21, 2026 -
Critical max 10.0USN-8575-2 758 CVEs
linux-aws, linux-aws-5.15, linux-aws-fips, linux-fips, linux-ibm, linux-nvidia vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when…
first Jul 23, 2026 -
Critical max 9.8USN-8729-1 97 CVEs
linux, linux-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-raspi, linux-realtime, linux-realtime-6.8 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute A…
first Sep 7, 2026 -
Critical max 9.8USN-8911-1 29 CVEs
linux-oem-6.17 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Hardware crypto device drivers; - NVIDIA Tegra memory controller driver; - Ne…
first Oct 9, 2026 -
Critical max 9.9USN-8816-1 101 CVEs
linux, linux-aws, linux-aws-7.0, linux-hwe-7.0, linux-ibm, linux-oracle, linux-raspi, linux-realtime vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - DRBD Distribut…
first Sep 24, 2026 -
Critical max 10.0USN-8620-1 762 CVEs
linux-azure-5.15, linux-azure-fde-5.15, linux-oracle-5.15 vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when…
first Jul 28, 2026 -
Critical max 10.0USN-8620-3 762 CVEs
linux-intel-iot-realtime, linux-intel-iotg-5.15 vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when…
first Jul 31, 2026 -
Critical max 9.9USN-8816-2 101 CVEs
linux-gcp, linux-gcp-7.0, linux-oem-7.0 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - DRBD Distribut…
first Sep 29, 2026 -
Critical max 10.0USN-8668-2 763 CVEs
linux-raspi vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when…
first Sep 21, 2026 -
Critical max 10.0USN-8610-1 757 CVEs
linux-azure-fde vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when…
first Jul 24, 2026 -
Critical max 10.0USN-8575-3 758 CVEs
linux-azure, linux-oracle vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when…
first Jul 24, 2026 -
Critical max 10.0USN-8668-1 763 CVEs
linux-gcp-5.15 vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when…
first Aug 21, 2026 -
Critical max 9.9USN-8816-4 101 CVEs
linux-gke vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - S390 architecture; - x86 architecture; - DRBD Distribut…
first Oct 2, 2026