|
801
|
7.5 |
HIGH
Network
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
scsi: target: file: Use kzalloc_flex for aio_cmd
The target_core_file doesn't initialize the aio_cmd->iocb for the
ki_write_strea…
Update
|
NVD-CWE-noinfo
|
CVE-2026-43055
|
2026-05-8 03:58 |
2026-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
802
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
vxlan: validate ND option lengths in vxlan_na_create
vxlan_na_create() walks ND options according to option-provided
lengths. A m…
Update
|
NVD-CWE-noinfo
|
CVE-2026-31738
|
2026-05-8 03:58 |
2026-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
803
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
net: ftgmac100: fix ring allocation unwind on open failure
ftgmac100_alloc_rings() allocates rx_skbs, tx_skbs, rxdes, txdes, and
…
Update
|
NVD-CWE-noinfo
|
CVE-2026-31737
|
2026-05-8 03:55 |
2026-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
804
|
6.3 |
MEDIUM
Network
|
-
|
-
|
A vulnerability has been found in router-for-me CLIProxyAPI 6.9.29. Affected by this issue is some unknown functionality of the file internal/api/handlers/management/api_tools.go of the component API…
New
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2026-8081
|
2026-05-8 03:51 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
805
|
9.8 |
CRITICAL
Network
|
-
|
-
|
Insecure Permissions vulnerability in grokability snipe-it v.8.4.0 and before and fixed after 2026-03-10 commit 676a9958 allows a remote attacker to execute arbitrary code via the app/Http/Controller…
New
|
CWE-284
Improper Access Control
|
CVE-2026-37709
|
2026-05-8 03:50 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
806
|
7.5 |
HIGH
Network
|
-
|
-
|
Regex Denial of Service in youtube-regex npm package through version 1.0.5.
New
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2025-65122
|
2026-05-8 03:50 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
807
|
6.8 |
MEDIUM
Physics
|
-
|
-
|
Medtronic MyCareLink Patient Monitor has an internal serial interface, which allows an attacker with physical access to access a login prompt via a UART terminal.
New
|
CWE-1263
Improper Physical Access Control
|
CVE-2025-4386
|
2026-05-8 03:46 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
808
|
6.8 |
MEDIUM
Physics
|
-
|
-
|
Medtronic MyCareLink Patient Monitor uses per-product credentials that are stored in a recoverable format. An attacker can use these credentials to modify encrypted drive data.
New
|
CWE-313
Cleartext Storage in a File or on Disk
|
CVE-2025-4397
|
2026-05-8 03:46 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
809
|
8.8 |
HIGH
Network
|
-
|
-
|
An Improper Access Control vulnerability in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote authenticated attacker to gain administrative access.
New
|
CWE-284
Improper Access Control
|
CVE-2026-5786
|
2026-05-8 03:46 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
810
|
8.9 |
HIGH
Network
|
-
|
-
|
An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to impersonate registered Sentry hosts and obtain valid CA-…
New
|
CWE-295
Improper Certificate Validation
|
CVE-2026-5787
|
2026-05-8 03:46 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
