|
1951
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
dm mpath: Add missing dm_put_device when failing to get scsi dh name
When commit fd81bc5cca8f ("scsi: device_handler: Return erro…
Update
|
NVD-CWE-noinfo
|
CVE-2026-43192
|
2026-05-12 05:36 |
2026-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1952
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
nfsd: fix nfs4_file refcount leak in nfsd_get_dir_deleg()
Claude pointed out that there is a nfs4_file refcount leak in
nfsd_get_…
Update
|
NVD-CWE-Other
|
CVE-2026-43193
|
2026-05-12 05:36 |
2026-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1953
|
9.6 |
CRITICAL
Network
|
praison
|
praisonai
|
PraisonAI is a multi-agent teams system. Prior to version 4.6.34, PraisonAI's MCP (Model Context Protocol) server (praisonai mcp serve) registers four file-handling tools by default — praisonai.rules…
Update
|
CWE-20 CWE-22 CWE-94 CWE-829 CWE-913
Improper Input Validation Path Traversal Code Injection Inclusion of Functionality from Untrusted Control Sphere Improper Control of Dynamically-Managed Code Resources
|
CVE-2026-44336
|
2026-05-12 05:25 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1954
|
9.8 |
CRITICAL
Network
|
-
|
-
|
RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH environment variable. NOTE: this is disputed because ability of an attacker to c…
Update
|
CWE-427
Uncontrolled Search Path Element
|
CVE-2025-69599
|
2026-05-12 05:25 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1955
|
9.8 |
CRITICAL
Network
|
-
|
-
|
1C-Bitrix through 25.100.500 allows Remote Code Execution because an actor with SOURCE/WRITE permissions for the Translate Module can upload and execute code by sending a PHP file and a .htaccess fil…
Update
|
CWE-94
Code Injection
|
CVE-2025-67887
|
2026-05-12 05:25 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1956
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: validate user queue size constraints
Add validation to ensure user queue sizes meet hardware requirements:
- Size mus…
Update
|
NVD-CWE-noinfo
|
CVE-2026-43195
|
2026-05-12 05:21 |
2026-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1957
|
7.5 |
HIGH
Network
|
-
|
-
|
Alkacon OpenCms before 16 allows XXE when the <!DOCTYPE> refers to an external host.
Update
|
CWE-611
XXE
|
CVE-2023-42346
|
2026-05-12 05:20 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1958
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
APEI/GHES: ARM processor Error: don't go past allocated memory
If the BIOS generates a very small ARM Processor Error, or
an inco…
Update
|
NVD-CWE-noinfo
|
CVE-2026-43201
|
2026-05-12 05:20 |
2026-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1959
|
7.5 |
HIGH
Network
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query
Fix a "scheduling while atomic" bug in mlx5e_ipsec_init_macs(…
Update
|
NVD-CWE-noinfo
|
CVE-2026-43199
|
2026-05-12 05:12 |
2026-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1960
|
9.8 |
CRITICAL
Network
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
tcp: fix potential race in tcp_v6_syn_recv_sock()
Code in tcp_v6_syn_recv_sock() after the call to tcp_v4_syn_recv_sock()
is done…
Update
|
CWE-362
Race Condition
|
CVE-2026-43198
|
2026-05-12 05:12 |
2026-05-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|