87964 matches found
ROS-20260928-73-0074
The vulnerability of the sndusbcreatestreams function in the Linux operating system’s USB audio driver is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260928-73-0035
The vulnerability of the updateqosrequest function in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...
ROS-20260928-73-0020
The vulnerability of the mm/hugetlb.c module in the Linux operating system is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260928-73-0099
The vulnerability of the drivers/base/regmap/regmap-slimbus.c component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...
ROS-20260928-73-0006
The vulnerability of the drivers/usb/host/max3421-hcd.c component in the Linux operating system is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260928-73-0111
The vulnerability of the topologyparsecpucapacity function in the drivers/base/archtopology.c file of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...
ROS-20260928-73-0085
The vulnerability of the virtio-net component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure...
ROS-20260928-73-0102
The vulnerability of the drivers/net/wireless/broadcom/brcm80211/brcmfmac component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
CVE-2026-94418
WolfSSL is vulnerable to a cryptographic signature verification bypass when the WOLFSSL_SMALL_CERT_VERIFY option is enabled. The ProcessPeerCertParse() function separates signature checks from parsing to save memory but fails to merge the signature result if a parse error occurs, effectively hidi...
CVE-2026-94418 Signature failure masked by date error under WOLFSSL_SMALL_CERT_VERIFY
Under WOLFSSLSMALLCERTVERIFY, ProcessPeerCertParse runs the certificate signature check separately from the parse to keep peak memory down, then merges the two results, but it merged the signature result back only when the parse returned 0, so any parse error hid it. ParseCertRelative reaches its...
CVE-2026-94418 Signature failure masked by date error under WOLFSSL_SMALL_CERT_VERIFY
Under WOLFSSLSMALLCERTVERIFY, ProcessPeerCertParse runs the certificate signature check separately from the parse to keep peak memory down, then merges the two results, but it merged the signature result back only when the parse returned 0, so any parse error hid it. ParseCertRelative reaches its...
CVE-2026-94418 Signature failure masked by date error under WOLFSSL_SMALL_CERT_VERIFY
Under WOLFSSLSMALLCERTVERIFY, ProcessPeerCertParse runs the certificate signature check separately from the parse to keep peak memory down, then merges the two results, but it merged the signature result back only when the parse returned 0, so any parse error hid it. ParseCertRelative reaches its...
CVE-2026-94418
Under WOLFSSLSMALLCERTVERIFY, ProcessPeerCertParse runs the certificate signature check separately from the parse to keep peak memory down, then merges the two results, but it merged the signature result back only when the parse returned 0, so any parse error hid it. ParseCertRelative reaches its...
FreePBX-SQLi-RCE
FreePBX CVE-2025-57819 - PoC d'injection SQL non authentifiée menant à une RCE Usage éducatif et recherche en sécurité uniquement - Voir l'avis juridique ci-dessous Preuve de concept d'exploitation pour CVE-2025-57819, une vulnérabilité critique d'injection SQL non authentifiée dans FreePBX...
PT-2026-99730
Name of the Vulnerable Software and Affected Versions OpenDKIM versions prior to 2.11.1 Description A remote off-by-one error exists in the Decoder component within the dkim qp decode function of the util.c file. An off-by-one error occurs when a program writes one byte past the end of the buffer...
CVE-2026-100677
stoatchat before 0.15.5 contains an account enumeration vulnerability in the login endpoint that exposes source file locations in error responses. Unauthenticated attackers can distinguish between registered and unregistered email addresses by comparing error location fields returned from POST...
CVE-2026-100677 stoatchat before 0.15.5 Account Enumeration via Error Location
stoatchat before 0.15.5 contains an account enumeration vulnerability in the login endpoint that exposes source file locations in error responses. Unauthenticated attackers can distinguish between registered and unregistered email addresses by comparing error location fields returned from POST...
CVE-2026-100677 stoatchat before 0.15.5 Account Enumeration via Error Location
stoatchat before 0.15.5 contains an account enumeration vulnerability in the login endpoint that exposes source file locations in error responses. Unauthenticated attackers can distinguish between registered and unregistered email addresses by comparing error location fields returned from POST...
EUVD-2026-87650
stoatchat before 0.15.5 contains an account enumeration vulnerability in the login endpoint that exposes source file locations in error responses. Unauthenticated attackers can distinguish between registered and unregistered email addresses by comparing error location fields returned from POST...
CVE-2026-100677 stoatchat before 0.15.5 Account Enumeration via Error Location
stoatchat before 0.15.5 contains an account enumeration vulnerability in the login endpoint that exposes source file locations in error responses. Unauthenticated attackers can distinguish between registered and unregistered email addresses by comparing error location fields returned from POST...