|
701
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
sched_ext: Fix stale direct dispatch state in ddsp_dsq_id
@p->scx.ddsp_dsq_id can be left set (non-SCX_DSQ_INVALID) triggering a
…
Update
|
NVD-CWE-noinfo
|
CVE-2026-31733
|
2026-05-8 01:44 |
2026-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
702
|
5.7 |
MEDIUM
Network
|
hcltech
|
bigfix_service_management
|
HHCL BigFix Service Management (SM) is affected by a Cross‑Site Request Forgery (CSRF) vulnerability. This could lead to unauthorized changes or exposure of sensitive data.
New
|
CWE-352
Origin Validation Error
|
CVE-2025-31957
|
2026-05-8 01:35 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
703
|
3.5 |
LOW
Network
|
hcltech
|
bigfix_service_management
|
HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images. This could lead to confidentiality and privacy risks if sensitive location information is unintentio…
New
|
CWE-1230
Exposure of Sensitive Information Through Metadata
|
CVE-2025-31959
|
2026-05-8 01:35 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
704
|
5.3 |
MEDIUM
Network
|
hcltech
|
bigfix_service_management
|
HCL BigFix Service Management (SM) is affected by an Information Disclosure – Server Banner issue was identified. Exposed server banners may reveal software versions and system details, potentially a…
New
|
CWE-200
Information Exposure
|
CVE-2025-31975
|
2026-05-8 01:33 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
705
|
7.5 |
HIGH
Network
|
hcltech
|
bigfix_service_management
|
HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials for a short duration while communicating with a backend, internal application which could allow an attacker to…
New
|
CWE-200
CWE-522
Information Exposure
Insufficiently Protected Credentials
|
CVE-2025-31976
|
2026-05-8 01:30 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
706
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: uvc: fix NULL pointer dereference during unbind race
Commit b81ac4395bbe ("usb: gadget: uvc: allow for application t…
Update
|
CWE-476
NULL Pointer Dereference
|
CVE-2026-31726
|
2026-05-8 01:26 |
2026-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
707
|
4.6 |
MEDIUM
Network
|
hcltech
|
bigfix_service_management
|
HCL BigFix Service Management (SM) does not adequately sanitize or safely render spreadsheet files (CSV, XLS, XLSX) before processing or distributing them. An attacker could populate data fields whic…
New
|
CWE-201
Insertion of Sensitive Information Into Sent Data
|
CVE-2025-31978
|
2026-05-8 01:26 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
708
|
5.4 |
MEDIUM
Network
|
hcltech
|
bigfix_service_management
|
HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header. This could allow browsers to perform MIME-type sniffing, p…
New
|
CWE-200
Information Exposure
|
CVE-2025-31984
|
2026-05-8 01:25 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
709
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo
Commit ec35c1969650 ("usb: gadget: f_ncm: Fix net_device lifecycl…
Update
|
CWE-476
NULL Pointer Dereference
|
CVE-2026-31727
|
2026-05-8 01:20 |
2026-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
710
|
- |
|
-
|
-
|
Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, Thunderbird 140.10.1, and Firefox ESR 115.35.…
New
|
-
|
CVE-2026-8091
|
2026-05-8 01:16 |
2026-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
