22702 matches found
PT-2026-80889
Invocation of Process Using Visible Sensitive Information in Black Duck blackduck-c-cpp 1.0.17 through 3.0.6 allows an actor able to execute code within the scanned project's build to obtain the Black Duck API token via the ambient process environment, which is inherited by subprocesses launched...
The vulnerability of the internal_b44.c component of the image storage software for OpenEXR, which has a wide dynamic range of brightness levels, allows a hacker to cause a service failure.
The vulnerability of the internalb44.c component of the OpenEXR image storage software, which handles images with a wide dynamic range of brightness, is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the md/raid1.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability in the md/raid1.c component of the Linux kernel lies in the fact that resources are not released after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the dpaa2_caam_probe() function in the caamalg_qi2.c component of the Linux kernel allows a hacker to induce a service failure.
The vulnerability of the dpaa2caamprobe function in the caamalgqi2.c component of the Linux kernel is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2026-84878
Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.1 through 2.44 Description Calling the tdelete function on a sufficiently deep tree may result in writing one pointer past the end of an alloca-allocated array on the stack, potentially causing the application to crash...
CVE-2026-68768
hashcat contains a heap-based buffer overflow out-of-bounds write in the outfilewrite function in src/outfile.c. When assembling output into a fixed-size buffer HCBUFSIZLARGE, 16 MB, the function sequentially appends the username, separator, hash, and plaintext via memcpy without validating that...
SUSE CVE-2026-72854
msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet addition of the requested size and the amount already used. The doubling loop guards its own multiplication against overflow, but the...
Apkx-Hunter v2.7.2
APKX-Hunter v2.7.1 — Debian Package APKX-Hunter is an open-source Android Static Analysis Framework written entirely in C , purpose-built for Android security assessments, reverse engineering, malware analysis, OWASP MASVS compliance scanning, bug bounty hunting, and penetration testing. The...
On Predicting Vulnerability Severity Using In-Context Learning: An Industrial Case Study
Modern software systems require earlier and more scalable vulnerability severity assessment to reduce exposure to high-impact security flaws. Security analysts typically assign CVSS scores, but this manual triage does not scale with the growth of disclosed vulnerabilities and often depends on clo...
CVE-2026-74685: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: hwmon: ltc4282 Clamp negative current limits When a negative value is passed to ltc4282writecurr, the signed long val is cast directly to u64: drivers/hwmon/ltc4282.c:ltc4282writecurr / need to pass it in millivolt / u32 in =...
CVE-2026-74441
A flaw was found in the Linux kernel's USB Type-C UCSI driver. This vulnerability arises from a timing issue during the unregistration of USB Type-C ports, where certain operations can race against the destruction of internal work queues. A local attacker could exploit this race condition to...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: xmlrpc-c (UTSA-2026-102697)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102697 advisory. XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting XSS vulnerability in the error page component. Tenable has extracte...
Linux Distros Unpatched Vulnerability : CVE-2026-72854
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - msgpackunpackerexpandbuffer in src/unpack.c, reached through the public msgpackunpackerreservebuffer API, computes its new buffer size using an unchecked sizet...
MINI-5X36-R5MX-5HJG
Bulletin has no description...
MINI-5553-V29F-JGCF
Bulletin has no description...
MINI-FHFR-R8P9-JVGQ
Bulletin has no description...
MINI-6XX3-CJCP-8MX7
Bulletin has no description...
MINI-8WGG-X7FP-W6PG
Bulletin has no description...