The vulnerability of the actGate() function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the actGate function in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the __qedr_alloc_mr() function in the drivers/infiniband/hw/qedr/verbs.c module of the Linux operating system’s InfiniBand driver allows a hacker to cause a service failure.

The vulnerability of the qedrallocmr function in the drivers/infiniband/hw/qedr/verbs.c module of the Linux operating system’s InfiniBand driver involves improper memory release memory leak. Exploiting this vulnerability could allow a attacker to cause a service failure...

Information Disclosure Vulnerability in Multiple Mozilla Products (CNVD-2026-19990)

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. An information disclosure vulnerability exists in several Mozilla produc...

CVE-2026-31827

Alienbin is an anonymous code and text sharing web service. In 1.0.0 and earlier, the /save endpoint in server.js drops and recreates the MongoDB TTL index on the entire post collection for every new paste submission. When User B submits a paste with a short TTL e.g., 30 seconds, the TTL index is...

The vulnerability of the MongoDB database management system, related to the unlimited distribution of resources, allows a hacker to cause a service failure.

The vulnerability of the MongoDB database management system is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the ixgbe_sw_init() function in the drivers/net/ethernet/intel/ixgbe/ixgbe_main.c file of the Linux kernel’s Ethernet adapter support driver allows a attacker to cause a system crash.

The vulnerability of the ixgbeswinit function in the drivers/net/ethernet/intel/ixgbe/ixgbemain.c file of the Linux Ethernet adapter driver module is related to blocking mechanism errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the xrep_revalidate_allocbt() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the xreprevalidateallocbt function in the Linux operating system is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause a service failure...

Google Chrome heap buffer overflow vulnerability (CNVD-2026-31993)

Google Chrome is a web browser developed by Google Inc. of the United States. Google Chrome has a heap buffer overflow vulnerability, and attackers can exploit this vulnerability to cause heap corruption...

OpenClaw 安全漏洞

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw has a security vulnerability that can be exploited by an attacker to cause reuse of pairing approvals across multiple accounts...

The vulnerability of the idpf component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the idpf component in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the NBDKit Plugin Framework, a tool for creating NBD servers, is related to a single shift error, which allows a hacker to trigger a service failure.

The vulnerability of the NBDKit Plugin Framework, a tool for creating NBD servers, is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the net/smc component in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the net/smc component in Linux operating systems is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

Adobe Commerce 安全漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a kind of merchants and brands for the world's leading digital commerce solutions. A security bypass vulnerability exists in Adobe Commerce, which can be exploited by an attacker to cause a security feature bypass...

Adobe Commerce 安全漏洞

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A security bypass vulnerability exists in Adobe Commerce, which can be exploited by an attacker to cause a security feature bypass...

ImageMagick 输入验证错误漏洞

ImageMagick is ImageMagick open source set of open source image processing software. Can read, convert or write images in a variety of formats. ImageMagick suffers from an integer overflow vulnerability that can be exploited by an attacker to perform out-of-bounds operations via a specially craft...

Google Android Denial of Service Vulnerability (CNVD-2026-14647)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a denial of service vulnerability that stems from improper input validation in multiple locations, which can be exploited by an attacker to cause a denial of service...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability. An attacker can exploit the vulnerability to cause a local elevation of privilege...

The vulnerability of the nbd_start_device_ioctl() function in the drivers/block/nbd.c module of the Linux kernel’s block devices driver allows a attacker to cause a service failure.

The vulnerability of the nbdstartdeviceioctl function in the drivers/block/nbd.c module of the Linux kernel’s block devices driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-28296

A flaw was found in the FTP GVfs backend. A remote attacker could exploit this input validation vulnerability by supplying specially crafted file paths containing carriage return and line feed CRLF sequences. These unsanitized sequences allow the attacker to terminate intended FTP commands and...

Apache Superset 安全漏洞

Apache Superset is a data visualization and data exploration platform from the Apache USA Foundation. A security bypass vulnerability exists in Apache Superset, which can be exploited by an attacker to execute sensitive SQL functions...