EUVD-2026-51336

An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cause a denial of service via a crafted UDP packet...

EUVD-2026-51335

An integer overflow in the UAVariant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write...

SUSE CVE-2026-17800

Inappropriate implementation in MediaRecording in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-17803

Insufficient validation of untrusted input in Save to Drive in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted PDF file. Chromium security severity: Medium...

The vulnerability of the UDS protocol analyzer, which is used by Wireshark for analyzing computer network traffic, allows a hacker to cause a service failure.

The vulnerability of the UDS protocol analyzer, a traffic analyzer for computer networks developed by Wireshark, relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the HTTP-protocol analyzer in Wireshark allows a hacker to induce a service failure.

The vulnerability of the HTTP protocol analyzer used by Wireshark, a tool for analyzing computer network traffic, relates to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

PT-2026-66671

Successful exploitation of the vulnerability could allow an unauthenticated attacker to exploit a stack-based buffer overflow in the password functionality to conduct code execution when the SafeEnhancement feature is enabled...

PT-2026-66675

Successful exploitation of the vulnerability could allow an authenticated attacker to exploit a stack-based buffer overflow in the upload functionality to conduct code execution...

Linux Distros Unpatched Vulnerability : CVE-2026-15722

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a...

PT-2026-66875

Name of the Vulnerable Software and Affected Versions TP-Link AXE75 V1 affected versions not specified Description An OS command injection flaw exists in the VPN module. This issue occurs due to improper filtering of special characters, allowing an adjacent, authenticated attacker to execute...

The vulnerability of the fingerprint recognition function of the 14Finger digital fingerprint collection utility allows a intruder to execute arbitrary code.

The vulnerability of the fingerprint recognition function of the 14Finger digital fingerprint collection utility is related to improper code generation. Exploiting this vulnerability could allow a remote attacker to generate arbitrary codes...

Cisco IOS Software IKEv2 Multiple Vulnerabilities (cisco-sa-asa-ftd-ios-dos-DOESHWHy)

According to its self-reported version, Cisco IOS is affected by multiple vulnerabilities. - A vulnerability in the IKEv2 feature of Cisco IOS Software, IOS XE Software, Secure Firewall ASA Software, and Secure FTD Software could allow an unauthenticated, remote attacker to cause the device to...

PT-2026-66833

Name of the Vulnerable Software and Affected Versions NTPsec affected versions not specified Description A buffer overflow occurs in the Zyfer refclock component of NTPsec. This issue allows a local attacker to cause a crash of the ntpd process by triggering a buffer copy without checking the siz...

The vulnerability of the lz4-java data compression library, related to the disclosure of information during data transmission, allows attackers to disclose protected information.

The vulnerability of the lz4-java data compression library is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...

CVE-2026-52371

A Server-Side Request Forgery SSRF in the xxl-job-admin/jobinfo/trigger component of xxl-job v3.4.0 allows authenticated attackers to scan resources via supplying a crafted HTTP request...

Linux Distros Unpatched Vulnerability : CVE-2026-63035

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap use-after-free vulnerability in the TransferSubscriptions service in open62541 may allow an authenticated attacker to cause a denial of service or...

Erlang/OTP 17.0 < 27.3.4.15 / 28.0 < 28.5.0.4 / 29.0 < 29.0.4 Multiple Vulnerabilities

The version of Erlang/OTP installed on the remote host is 17.0 prior to 27.3.4.15, 28.0 prior to 28.5.0.4, or 29.0 prior to 29.0.4. It is, therefore, affected by multiple vulnerabilities: - The Erlang/OTP ssl TLS 1.2 and earlier and DTLS client does not verify that the cipher suite selected by th...

Qnap QTS and QuTS hero Stack-based Buffer Overflow (CVE-2025-66280)

An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the...

The vulnerability of the Password component in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the Password component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the bcpkix module in the Java Bouncy Castle cryptographic library allows a hacker to bypass existing security mechanisms.

The vulnerability of the bcpkix module in the Java Bouncy Castle cryptographic library is related to the use of the outdated SHA-1 cryptographic algorithm. Exploiting this vulnerability allows a remote attacker to bypass existing security measures...