Complete feed

Security advisories & CVEs

1121 advisories across 32 monitored vendors.

Home overview

Critical

CISA KEV

Plaintext password recovery via timing discrepancy in pam_userdb module

Plaintext password recovery via timing discrepancy in pam_userdb module. Red Hat rates this moderate (CVSS 4.8). Weakness: CWE-208. Affected package(s): pam-main. Resolved in Red Hat advisory RHSA-2026:35016 — update the affected packages (`sudo dnf update`).

Plaintext password recovery via timing discrepancy in pam_userdb module

Unauthorized file creation via path traversal

MariaDB server: Information disclosure of stored routine definitions due to insufficient privilege check

Denial of Service due to HTTP/2 max header size handling

Data manipulation via request-boundary confusion in HttpObjectDecoder

Denial of Service via uncontrolled HTTP/2 concurrent streams

Sandbox Breakout Using Promise Species

Arbitrary code execution due to incomplete sandbox restrictions

Netty DNS resolver: DNS Cache Poisoning via predictable transaction IDs

Sandbox escape leading to arbitrary code execution via security bypass

Arbitrary code execution via sandbox escape vulnerability

Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling

Heap buffer over-write via `magick -distribute-cache` service connection

integer underflow in berval2tl_data() leads to heap out-of-bounds read

.NET: Local file tampering via link following vulnerability

Heap buffer overflow due to signed integer overflow in Unicode output sizing

Denial of Service due to heap out-of-bounds read in CMS password-based decryption

Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

NULL pointer dereference in QUIC server initial packet handling

Plaintext password recovery via timing discrepancy in pam_userdb module

Unauthorized file creation via path traversal

MariaDB server: Information disclosure of stored routine definitions due to insufficient privilege check

Denial of Service due to HTTP/2 max header size handling

Data manipulation via request-boundary confusion in HttpObjectDecoder

Denial of Service via uncontrolled HTTP/2 concurrent streams

Sandbox Breakout Using Promise Species

Arbitrary code execution due to incomplete sandbox restrictions

Netty DNS resolver: DNS Cache Poisoning via predictable transaction IDs

Sandbox escape leading to arbitrary code execution via security bypass

Arbitrary code execution via sandbox escape vulnerability

Qemu-kvm: heap buffer overflow in virtio-blk scsi request handling

Heap buffer over-write via `magick -distribute-cache` service connection

integer underflow in berval2tl_data() leads to heap out-of-bounds read

.NET: Local file tampering via link following vulnerability

Heap buffer overflow due to signed integer overflow in Unicode output sizing

Denial of Service due to heap out-of-bounds read in CMS password-based decryption

Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

NULL pointer dereference in QUIC server initial packet handling