2026

HCL BigFix Service Management (SM) is affected by a security misconfiguration vulnerability due to CSP header. This cou

HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed direct

HCL BigFix Service Management (SM) does not adequately sanitize or safely render spreadsheet files (CSV, XLS, XLSX) befo

HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials for a short duration while comm

HCL BigFix Service Management (SM) is affected by an Information Disclosure – Server Banner issue was identified. Expose

HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images. This could lead to co

HHCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability. This could lead t

Cross Site Scripting vulnerability in Juzaweb CMS v.5.0.0 allows a remote attacker via execute arbitrary code via a craf

A security flaw has been discovered in FlowiseAI Flowise up to 3.0.12. Affected is the function Login of the file packag

Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are insecure. Apache::Sessi

Gazelle versions through 0.49 for Perl allows HTTP Request Smuggling via Improper Header Precedence. Gazelle incorrectl

A type confusion vulnerability in Qt SVG allows an attacker to cause an application crash via a crafted SVG image. Wh

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ec_bhf: Fix dma_free_coherent() dma

In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: Fix potential NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: mailbox: Prevent out-of-bounds access in fw_mbox_in

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Add bounds check on pat_index to prevent OO

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Add sanity check for OOB writes at

In the Linux kernel, the following vulnerability has been resolved: dm: clear cloned request bio pointer when last clon

In the Linux kernel, the following vulnerability has been resolved: APEI/GHES: ensure that won't go past CPER allocated

In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix double destroy_workqueue on service

In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Flush exception handling work when

In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: fix out-of-bounds access in

In the Linux kernel, the following vulnerability has been resolved: ceph: supply snapshot context in ceph_zero_partial_

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix possible dereference of uninitiali

In the Linux kernel, the following vulnerability has been resolved: md-cluster: fix NULL pointer dereference in process

In the Linux kernel, the following vulnerability has been resolved: media: mtk-mdp: Fix a reference leak bug in mtk_mdp

In the Linux kernel, the following vulnerability has been resolved: drm/atmel-hlcdc: fix memory leak from the atomic_de

In the Linux kernel, the following vulnerability has been resolved: hfsplus: pretend special inodes as regular files S

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix potential zero beacon interval in

In the Linux kernel, the following vulnerability has been resolved: EFI/CPER: don't go past the ARM processor CPER reco

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Ignore -EBUSY when checking nested events

In the Linux kernel, the following vulnerability has been resolved: fbdev: of: display_timing: fix refcount leak in of_

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix Null reference while

In the Linux kernel, the following vulnerability has been resolved: gfs2: fiemap page fault fix In gfs2_fiemap(), we a

In the Linux kernel, the following vulnerability has been resolved: arm64: Add support for TSV110 Spectre-BHB mitigatio

In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix RSS context delete logic We need to f

In the Linux kernel, the following vulnerability has been resolved: phy: fsl-imx8mq-usb: set platform driver data Add

In the Linux kernel, the following vulnerability has been resolved: alpha: fix user-space corruption during memory comp

In the Linux kernel, the following vulnerability has been resolved: media: cx88: Add missing unmap in snd_cx88_hw_param

In the Linux kernel, the following vulnerability has been resolved: media: qcom: camss: vfe: Fix out-of-bounds access i

In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix WARNING in usb_tx_block The fu

In the Linux kernel, the following vulnerability has been resolved: ovpn: tcp - fix packet extraction from stream When

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: move wait_on_sem() out of spinlock With

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: in-kernel: always set ID as avail when r

In the Linux kernel, the following vulnerability has been resolved: HID: prodikeys: Check presence of pm->input_ep82 F

In the Linux kernel, the following vulnerability has been resolved: usb: chipidea: udc: fix DMA and SG cleanup in _ep_n

In the Linux kernel, the following vulnerability has been resolved: 9p/xen: protect xen_9pfs_front_free against concurr

In the Linux kernel, the following vulnerability has been resolved: vhost: move vdpa group bound check to vhost_vdpa R

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Fix SError of kernel pan

In the Linux kernel, the following vulnerability has been resolved: media: i2c/tw9906: Fix potential memory leak in tw9