AZL-93261 CVE-2026-56852 affecting package moby-containerd-cc for versions less than 1.7.7-16

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

SUSE CVE-2026-64010

In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: Fix use-after-free race in nfcllcprecvcc A race condition exists in the NFC LLCP connection state machine where the connection acceptance packet CC can be processed concurrently with socket release. This can lead to a...

CVE-2026-61078: Improper Access Control

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft component: Common Application Objects. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2026-47695: Server-Side Request Forgery (SSRF)

CC: Tweaked is a mod for Minecraft which adds programmable computers, turtles, and more to the game. Prior to version 1.119.0, CC-Tweaked's HTTP API http.request, http.websocket blocks requests to private network ranges to prevent server-side request forgery SSRF. This protection can be bypassed ...

CVE-2026-60606: Improper Access Control

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft component: Common Application Objects. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2026-64010

CVE-2026-64010 involves a use-after-free in the Linux NFC LLCP stack. The race occurs when nfc_llcp_recv_cc() moves a socket from the connecting_sockets list to the sockets list without holding the socket lock, risking linking a freed socket if llcp_sock_release() runs concurrently. The mitigatio...

CVE-2024-34268: Missing Authentication for Critical Function

EQ-3 Eqiva CC-RT-BLE Bluetooth Smart Radiator Thermostat Firmware up to the latest version 1.46 was discovered to allow unsecured bluetooth connections. This vulnerability allows attackers to gain full access to the device without authentication...

CVE-2024-34268

CVE-2024-34268 affects the EQ-3 Eqiva CC-RT-BLE Bluetooth Smart Radiator Thermostat. The issue is that firmware up to 1.46 allows unsecured Bluetooth connections, enabling attackers to gain full access to the device without authentication. The CVSS v3.1 metrics from the entry indicate: AV Adjacen...

CVE-2026-53488 affecting package moby-containerd-cc for versions less than 1.7.7-15

CVE-2026-53488 affecting package moby-containerd-cc for versions less than 1.7.7-15. A patched version of the package is available...

CVE-2026-46680 affecting package moby-containerd-cc for versions less than 1.7.7-15

CVE-2026-46680 affecting package moby-containerd-cc for versions less than 1.7.7-15. A patched version of the package is available...

CVE-2026-42250 affecting package kata-containers-cc for versions less than 3.15.0.aks0-15

CVE-2026-42250 affecting package kata-containers-cc for versions less than 3.15.0.aks0-15. A patched version of the package is available...

CVE-2025-4574 affecting package kata-containers-cc for versions less than 3.15.0.aks0-14

CVE-2025-4574 affecting package kata-containers-cc for versions less than 3.15.0.aks0-14. A patched version of the package is available...

CVE-2025-5791 affecting package kata-containers-cc for versions less than 3.15.0.aks0-14

CVE-2025-5791 affecting package kata-containers-cc for versions less than 3.15.0.aks0-14. A patched version of the package is available...

EUVD-2025-210213

In multiple functions of btmsec.cc, there is a possible way for an attacker to intercept SMS messages due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2026-6143

A security flaw has been discovered in farion1231 cc-switch up to 3.12.3. Affected by this issue is some unknown functionality of the file src-tauri/src/proxy/server.rs of the component ProxyServer. The manipulation results in permissive cross-domain policy with untrusted domains. The attack can ...

CVE-2026-4032

The CodeColorer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'class' parameter in 'cc' comment shortcode in versions up to, and including, 0.10.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2026-33814 affecting package kata-containers-cc for versions less than 3.15.0.aks0-12

CVE-2026-33814 affecting package kata-containers-cc for versions less than 3.15.0.aks0-12. A patched version of the package is available...

MINI-V4MX-GW95-24CC

Bulletin has no description...

MINI-JPC9-V4CC-HGGM

Bulletin has no description...

CVE-2021-4478

Dräger CC-Vision Basic before 7.5.3 and Dräger CC-Vision E-Cal before 7.2.5.0 contain an out-of-bounds write vulnerability when loading .gdt files. A crafted .gdt file can trigger a buffer overflow during file parsing, allowing an attacker to crash the application or execute malicious code on the...