CVE Vulnerability Catalog

A vulnerability was found in the Linux kernel's bridge br_nd_send() function, which processes Neighbor Discovery (ND) options. Lack of option length validation may allow out-of-bounds read or use of a too-short source LLADDR option.

In the Linux kernel, the ftgmac100 driver had a memory leak vulnerability during ring allocation on network interface open failure. The ftgmac100_alloc_rings() function did not free previously allocated resources (rx_skbs, tx_skbs, rxdes, txdes, rx_scratch) on error, causing memory leaks.

In the Linux kernel, a resource leak was found in gpiochip_add_data_with_key() on error paths. After commit aab5c6f20023, `gdev->dev.release` is unset, so the reference count to `gdev->dev` is not dropped on errors. The fix drops the reference and reorders code to prevent double-free.

A vulnerability has been identified in the Linux kernel that leads to a NULL pointer dereference in the eth_get_drvinfo function. The issue occurs when a userspace tool queries the interface while the device is detached.

W jądrze systemu Linux zidentyfikowano podatność, która została rozwiązana. Dotyczy ona funkcji set_posix_acl_entries_dacl() i set_ntacl_dacl(), które mogą prowadzić do przepełnienia zmiennej u16 podczas akumulacji rozmiarów ACE, co skutkuje nadpisywaniem wcześniejszych wpisów ACL.

W jądrze systemu Linux zidentyfikowano podatność w sterowniku caiaq, polegającą na braku odpowiedniego odniesienia do urządzenia USB w funkcji create_card(). Może to prowadzić do dereferencji zwolnionego obiektu usb_device, co stwarza ryzyko awarii systemu.

GnuTLS performs case-sensitive comparisons of nameConstraints labels, allowing a remote attacker to bypass policy by crafting a certificate with casing differences in the Subject Alternative Name.

A vulnerability in Keycloak causes the disabling of account and account-api features via the `--features-disabled` flag to be ineffective. Five REST API endpoints under `/account/v1alpha1` remain fully functional because they lack the `checkAccountApiEnabled()` gate that correctly blocks the other four endpoints in the same service class.

A vulnerability in the assisted-service REST API, an optional Assisted Installer component in the Multicluster Engine (MCE), allows an authenticated user with minimal namespace-scoped privileges to obtain administrative credentials for arbitrary clusters provisioned through the hub. The credentials download endpoint (GET /v2/clusters/{cluster_id}/credentials) and the kubeconfig download endpoint are operational in AUTH_TYPE=local mode, which unconditionally grants full administrative access to any request bearing a valid JWT. A valid local JWT is embedded as a plaintext query parameter in InfraEnvStatus.ISODownloadURL and is readable by any user who has get rights on an InfraEnv object in their own namespace.

Podatność CVE-2026-7382 dotyczy oprogramowania PDKS firmy MeWare Software Development Inc., które umożliwia nieautoryzowanym osobom dostęp do prywatnych informacji osobistych. Problem występuje w wersjach od V16.20200313 do przed VMYR_3.5.2025117.

Directory traversal vulnerability in the Buckets component of Cockpit 2.13.5 and earlier. Allows authenticated attackers to write files to arbitrary locations within the uploads directory or overwrite assets with malicious versions.

Dell Disk Library for Mainframe (versions DLm 8700/2700) contains a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability.

Integer overflow in ANGLE in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

In elie mcp-project 0.1.0, the search_papers function in research_server.py is vulnerable to path traversal via the topic argument. Local access required, exploit public.

A vulnerability was found in Grav CMS up to version 1.7.49.5/2.0.0-beta.1 in the FileCache::doGet function of the Cache Value Handler component, leading to deserialization. The attack can be launched remotely but requires high complexity and is difficult to exploit. The exploit has been made public. Upgrading to version 2.0.0-beta.2 addresses the issue.

Vulnerability in Xuxueli xxl-job up to 3.3.2 affects an unknown function in OpenApiController.java (OpenAPI Endpoint component). Manipulation of the default_token argument leads to use of a hard-coded cryptographic key. Remote attack is possible but difficult due to high complexity.

A weakness in Xuxueli xxl-job up to 3.3.2 in the triggerJob function in XxlJobServiceImpl.java allows manipulation of the addressList argument, leading to server-side request forgery (SSRF). The attack can be performed remotely and the exploit is publicly available.

A reflected Cross-Site Scripting (XSS) vulnerability was found in the School Management System by mahmoudai1. An unauthenticated remote attacker can execute arbitrary JavaScript in a victim's browser via the unsanitized type parameter in register.php.

In Elastic Package Registry, a vulnerability exists due to improper verification of cryptographic signature (CWE-347). An attacker positioned to intercept network traffic or influence contents served to a self-hosted registry can substitute a tampered package without integrity check failing.

In the GNU C Library (glibc) versions 2.0.1 through 2.43, a vulnerability exists in the deprecated functions ns_printrrf, ns_printrr, and fp_nquery. These functions fail to validate RDATA content against RDATA length in DNS responses for A6, CERT, LOC, TKEY, or TSIG records, potentially allowing an attacker to craft a DNS response causing application crash or uninitialized memory read.