CVE-2026-24921

Address read vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

CVE-2026-24921

Address read vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

CVE-2026-24921

CVE-2026-24921 concerns an address read issue in the HDC module. The available connected documents consistently state this vulnerability affects availability and confidentiality, with a local attack vector and low attack complexity, but they do not provide concrete details on affected products, v...

CVE-2026-24921

Address read vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...

CVE-2026-24918

CVE-2026-24918 affects a component called the communication module with a memory-read issue as the root cause. The vulnerability may allow local attackers to read memory, and exploitation could impact system availability. The PT-security entry notes an issue where memory is read incorrectly and m...

CVE-2026-24918

Address read vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-5656

Address read vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-2000

CVE-2026-2000 affects DCN DCME-320 Web Management Backend. The vulnerability is in apply_config() handling of the ip_list argument in /function/system/basic/bridge_cfg.php, where manipulation leads to command injection. It is remotely exploitable and exploits have been published. Public reports (...

CVE-2025-15566

creationtimestamp| type| source ---|---|--- 2026-02-06 04:58:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3me64lfqnlr2h 2026-02-06 13:56:03+00:00| seen| https://bsky.app/profile/kubernetes.dev/post/3me72n6p2qy2o 2026-02-06 14:08:57+00:00| seen|...

CVE-2026-1974 Free5GC SMF datapath.go ResolveNodeIdToIp denial of service

A vulnerability was identified in Free5GC up to 4.1.0. This affects the function ResolveNodeIdToIp of the file internal/sbi/processor/datapath.go of the component SMF. The manipulation leads to denial of service. Remote exploitation of the attack is possible. The exploit is publicly available and...

CVE-2026-0391

creationtimestamp| type| source ---|---|--- 2026-02-06 01:29:20+00:00| seen| https://bsky.app/profile/Android.activitypub.awakari.com.ap.brid.gy/post/3me5qvt57gqn2 2026-02-06 06:33:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116022286160152070 2026-02-06 12:38:18+00:00| seen|...

CVE-2026-25523

Magento-lts is a long-term support alternative to Magento Community Edition CE. Prior to version 20.16.1, the admin url can be discovered without prior knowledge of it's location by exploiting the X-Original-Url header on some configurations. This issue has been patched in version 20.16.1...

OSV-2026-204 Segv on unknown address in icalarray_append

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=481635423 Crash type: Segv on unknown address Crash state: icalarrayappend icalstrarrayappend parsevcard...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system developed by Chinese company Huawei. It is a full-scenario distributed operating system based on a microkernel architecture. There is a security vulnerability in Huawei HarmonyOS, which stems from an issue with address reading in the HDC module. This...

PT-2026-6833

Name of the Vulnerable Software and Affected Versions TapinRadio version 2.12.3 Description TapinRadio version 2.12.3 contains a denial of service issue in the application proxy address configuration. Local attackers can crash the application by overwriting the address field with 3000 bytes of...

Open5GS 代码问题漏洞

Open5GS is an open-source implementation of 5G Core and EPC in C language, which serves as the core network for Lte/Nr networks. Versions of Open5GS 2.7.6 and earlier contain code vulnerabilities due to a null pointer dereferencing issue in the PGW S5U address handling program...

PT-2026-43745

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/amdkfd component where the address watch clear code receives watch id as an unsigned value, but certain helper functions use a signed integer. When a very larg...

Huawei EMUI和Huawei HarmonyOS 安全漏洞

Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. An address reading vulnerability exists in the Huawei EMUI and Huawei HarmonyOS communication module, which can b...

PT-2026-6698

Name of the Vulnerable Software and Affected Versions HDC module affected versions not specified Description An address read issue exists in the HDC module. Successful exploitation could impact system availability and confidentiality. Recommendations At the moment, there is no information about a...

CVE-2025-68458 webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior

Webpack is a module bundler. From version 5.49.0 to before 5.104.1, when experiments.buildHttp is enabled, webpack’s HTTPS resolver HttpUriPlugin can be bypassed to fetch resources from hosts outside allowedUris by using crafted URLs that include userinfo username:password@host. If allowedUris...