[UPDATE] [high] Linux Kernel: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in the Linux Kernel to create a denial-of-service condition or carry out other unspecified attacks.
Advisories tracked
20,853
● Live advisory feed
Security Advisory Fusion for CSIRTs, SOCs & Defenders
Security advisories from 24 sources — CISA, CERT-EU, NCSC-UK, BSI, CERT-FR, NCSC-NL, JPCERT/CC, JVN, HKCERT, the Canadian Cyber Centre, NVD, GitHub, Microsoft, Cisco, Fortinet, Palo Alto Networks and more — normalized, translated to English and flagged against the CISA KEV catalog. One global feed for CSIRTs, SOCs and defenders.
Known exploited
1,782
Sources online
24
Last sync
42M AGO
[UPDATE] [high] Linux Kernel: Multiple vulnerabilities allow Denial of Service
An attacker can exploit multiple vulnerabilities in the Linux Kernel to conduct a Denial of Service attack or achieve unspecified effects.
[UPDATE] [high] Linux Kernel: Multiple vulnerabilities allow denial of service
An attacker can exploit multiple vulnerabilities in the Linux Kernel to carry out a denial of service attack or achieve unspecified effects.
[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities
A local attacker can exploit multiple vulnerabilities in the Linux Kernel to conduct a denial of service attack and cause other unspecified effects.
[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities allow denial of service
A local attacker can exploit multiple vulnerabilities in the Linux Kernel to conduct a denial of service attack.
[UPDATE] [high] Linux Kernel: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Linux Kernel to conduct a Denial of Service attack and unspecified attacks.
[UPDATE] [high] Linux Kernel: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Linux Kernel to conduct a denial of service attack or achieve other unspecified impacts.
[UPDATE] [high] Linux Kernel: Multiple vulnerabilities allow Denial of Service
An attacker can exploit multiple vulnerabilities in the Linux Kernel to create a Denial of Service state and cause unspecified effects.
[UPDATE] [high] Linux Kernel: Multiple vulnerabilities
A remote attacker can exploit multiple vulnerabilities in the Linux Kernel to compromise confidentiality, integrity, and availability.
[UPDATE] [high] Linux Kernel: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in the Linux Kernel to carry out unspecified attacks that may lead to a denial-of-service condition or cause memory corruption.
[UPDATE] [high] Linux Kernel: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in the Linux Kernel to carry out unspecified attacks that may lead to a denial-of-service condition or cause memory corruption.
[UPDATE] [high] Linux Kernel: Multiple Vulnerabilities
An attacker can exploit multiple vulnerabilities in the Linux Kernel to perform a denial of service attack or achieve other unspecified effects.
CVE-2026-18437: The MailerPress – Newsletter, email marketing & AI automation plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the `mailerpress/v1/co
The MailerPress – Newsletter, email marketing & AI automation plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the mailerpress/v1/contact endpoint in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated…
CVE-2026-18436: The MailPress plugin for WordPress is vulnerable to unauthorized access in versions up to, and including, 1.5.0 via the campaign revision-restore REST endpoint (POST /wp-json/mailp
The MailPress plugin for WordPress is vulnerable to unauthorized access in versions up to, and including, 1.5.0 via the campaign revision-restore REST endpoint (POST /wp-json/mailpress/v1/campaign/<id>/restore-revision/<revision_id>). The route in the vulnerable range was registe…
CVE-2026-15722: A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-suppli
A stack buffer overflow flaw was found in 389 Directory Server (389-ds-base). The get_ruvelement_from_berval() function in repl5_ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated at…
CVE-2026-11770: A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Becaus
A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and …
CVE-2026-10079: A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). When processing Kubernetes Deployments, ACS replaces deployment identity metadata based on the openshi
A flaw was found in Red Hat Advanced Cluster Security for Kubernetes (RHACS). When processing Kubernetes Deployments, ACS replaces deployment identity metadata based on the openshift.io/encoded-deployment-config label. A user with permission to create Deployments can set this lab…
[NEW] [medium] Linux Kernel: Multiple vulnerabilities allow unspecified attack
An attacker can exploit multiple vulnerabilities in the Linux Kernel to carry out an unspecified attack, potentially bypassing security measures, causing a denial-of-service state, or disclosing confidential information.
[UPDATE] [high] Linux Kernel: Multiple vulnerabilities
A remote attacker can exploit multiple vulnerabilities in the Linux Kernel to bypass security measures, cause a denial-of-service condition, and achieve further unspecified impacts.
[UPDATE] [medium] Linux Kernel: Multiple vulnerabilities
A local attacker can exploit multiple vulnerabilities in the Linux Kernel to bypass security measures, cause a denial of service, and potentially execute code.
[NEW] [high] IBM WebSphere Application Server and Application Server Liberty: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in IBM WebSphere Application Server Liberty and IBM WebSphere Application Server to execute arbitrary code, escalate privileges, conduct a Denial of Service attack, disclose information, manipulate files, perform a Cross-Site Scrip…
[NEW] [medium] Linux Kernel: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in the Linux Kernel to conduct unspecified attacks, which may include DoS attacks, information disclosure, memory corruption, or bypassing security measures.
USN-8620-3: Linux kernel (Intel IoTG) vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated…
[NEU] [mittel] WP Royal Royal Elementor Addons: Schwachstelle ermöglicht Offenlegung von Informationen
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in WP Royal Royal Elementor Addons ausnutzen, um Informationen offenzulegen.
[NEU] [hoch] PHP: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in PHP ausnutzen, um SQL-Injection durchzuführen, beliebigen Code auszuführen, Daten zu manipulieren oder einen Denial-of-Service-Zustand auszulösen.
CVE-2026-65313: A provisioning script used when installing HIPASE-250 (formerly 250 SCALA) engineering workstations sets a fixed, hard-coded x11vnc password. Because the same credential is applied
A provisioning script used when installing HIPASE-250 (formerly 250 SCALA) engineering workstations sets a fixed, hard-coded x11vnc password. Because the same credential is applied to every workstation provisioned this way, an attacker with adjacent-network access who knows the p…
CVE-2026-65311: The HTTP server component of ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions exposes an undocumented endpoint that changes the server's logging level and target withou
The HTTP server component of ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions exposes an undocumented endpoint that changes the server's logging level and target without requiring authentication. A remote, unauthenticated attacker with network access to the service ma…
CVE-2026-65310: ANDRITZ HIPASE-250 (formerly 250 SCALA), in the default configuration of affected versions, exposes its data and configuration endpoint without any authentication and permissive CO
ANDRITZ HIPASE-250 (formerly 250 SCALA), in the default configuration of affected versions, exposes its data and configuration endpoint without any authentication and permissive CORS on every response. An unauthenticated attacker with network access can read live process values a…
[NEW] [high] IBM App Connect Enterprise: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in IBM App Connect Enterprise to disclose information, execute arbitrary code, and manipulate files.
[NEW] [high] Ruby on Rails: Vulnerability allows information disclosure
A remote, anonymous attacker can exploit a vulnerability in Ruby on Rails to disclose information, which may lead to remote code execution or lateral movement.
[NEW] [medium] ImageMagick: Vulnerability allows denial of service
A local attacker can exploit a vulnerability in ImageMagick to conduct a denial of service attack.
[NEW] [high] Xen: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Xen to escalate privileges, disclose confidential information, or trigger a Denial-of-Service condition.
[NEW] [high] VMware Products: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in VMware ESXi, VMware vCenter Server, VMware Workstation, and VMware Fusion to cause a Denial of Service, disclose information, bypass security measures, and execute code.
[NEW] [high] Samba: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Samba to disclose confidential information, bypass security measures, cause a denial-of-service condition, or manipulate data.
[NEW] [high] Erlang/OTP: Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in Erlang/OTP to perform a denial of service attack, execute arbitrary code, bypass security measures, and manipulate or disclose data.
[NEW] [medium] Red Hat Enterprise Linux (go-billy): Vulnerability allows Denial of Service
A remote, anonymous attacker can exploit a vulnerability in Red Hat Enterprise Linux to conduct a Denial of Service attack.
[NEW] [medium] ImageMagick: Vulnerability allows information disclosure
A remote, anonymous attacker can exploit a vulnerability in ImageMagick to disclose information.
[NEW] [medium] IBM App Connect Enterprise: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in IBM App Connect Enterprise to conduct a denial of service attack, disclose information, manipulate files, perform a cross-site scripting attack, and bypass security measures.
[NEW] [medium] IBM WebSphere Application Server Liberty: Multiple vulnerabilities allow denial of service
An attacker can exploit multiple vulnerabilities in IBM WebSphere Application Server Liberty to conduct a denial of service attack.
[NEW] [high] Internet Systems Consortium BIND: Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in Internet Systems Consortium BIND to bypass security measures, manipulate data, disclose confidential information, or trigger a denial-of-service condition.
[NEW] [high] Mozilla Firefox and Firefox ESR: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Mozilla Firefox and Mozilla Firefox ESR to execute arbitrary code, bypass security measures, disclose confidential information, escalate permissions, perform sandbox escapes, manipulate data, trigger a denial-of-service conditio…
[NEW] [high] Red Hat Ansible Automation Platform (node-tar, linkify-it, protobufjs, brace-expansion, fast-uri, DOMPurify): Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in Red Hat Ansible Automation Platform to bypass security measures, conduct cross-site scripting attacks, manipulate data, trigger a denial-of-service condition, or execute arbitrary code.
[NEW] [medium] Oracle Java SE: Multiple vulnerabilities
A remote, anonymous, or authenticated attacker can exploit multiple vulnerabilities in Oracle Java SE to compromise confidentiality, integrity, and availability.
[NEW] [low] helm: Vulnerability allows Denial of Service
A remote, anonymous attacker can exploit a vulnerability in helm to carry out a Denial of Service attack.
[NEW] [high] Red Hat Enterprise Linux (sssd, glib, c-ares): Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in Red Hat Enterprise Linux to gain administrator rights, bypass security measures, manipulate data, and trigger a Denial-of-Service condition.
[NEW] [medium] IBM WebSphere Application Server: Vulnerability allows bypassing security measures
A remote, anonymous attacker can exploit a vulnerability in IBM WebSphere Application Server and IBM WebSphere Application Server Liberty to bypass security measures.
[NEW] [high] IBM Langflow Desktop: Multiple vulnerabilities
An attacker can exploit multiple vulnerabilities in IBM Langflow Desktop to execute arbitrary program code, bypass security precautions, and disclose information.
[NEW] [medium] ImageMagick: Vulnerability allows Denial of Service
A local attacker can exploit a vulnerability in ImageMagick to conduct a Denial of Service attack.
[NEW] [medium] Apache Tomcat: Multiple vulnerabilities
A remote, anonymous attacker can exploit multiple vulnerabilities in Apache Tomcat to bypass security measures and disclose information.
[NEW] [medium] Mozilla Firefox: Multiple vulnerabilities allow unspecified attack
An attacker can exploit multiple vulnerabilities in Mozilla Firefox to conduct an unspecified attack.