CVE-2026-93166

A flaw was found in the wifi: rtw89 driver of the Linux kernel. An off-by-one error in the rtw89ppdustr function, due to an incorrect comparison, can lead to an out-of-bounds access. This vulnerability could potentially result in a denial of service or information disclosure...

CVE-2026-93064

A flaw was found in the iwlwifi driver of the Linux kernel. An off-by-one error in the iwlmvmfrobtxfkeyiter function, responsible for sanitizing transmit TXF keys, incorrectly calculates the memory clear operation's starting point. This error results in one byte before the intended key being...

CVE-2026-98474

A flaw was found in the Linux kernel's s390 PCI subsystem. This flaw can lead to a Denial of Service DoS due to a missing device lock during PCI Peripheral Component Interconnect error recovery. When error recovery status is reported without proper locking, concurrent device operations can access...

CVE-2026-113469

A failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature verification routine resulting in acceptance of unauthenticated dynamic data update during Autoupdate routine...

Encoding Error

Overview fast-uri is a Dependency-free RFC 3986 URI toolbox Affected versions of this package are vulnerable to Encoding Error via the decodeValidScheme function, which decoded percent-encoded URI schemes using the deprecated unescape global including the JavaScript-only %uXXXX form before...

Encoding Error

Overview org.webjars.npm:fast-uri is a Dependency-free RFC 3986 URI toolbox Affected versions of this package are vulnerable to Encoding Error via the decodeValidScheme function, which decoded percent-encoded URI schemes using the deprecated unescape global including the JavaScript-only %uXXXX fo...

CVE-2026-113469 Improper Signature Verification of Active Update Files

A failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature verification routine resulting in acceptance of unauthenticated dynamic data update during Autoupdate routine...

CVE-2026-113469 Improper Signature Verification of Active Update Files

A failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature verification routine resulting in acceptance of unauthenticated dynamic data update during Autoupdate routine...

CVE-2026-113469

The SNS is vulnerable to a logic error in its signature verification routine . This flaw allows the system to accept unauthenticated dynamic data updates during the Autoupdate routine . The vulnerability (CWE-287) can lead to high impacts on confidentiality , integrity , and availability (CVSS 3....

EUVD-2026-104828

A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license files.It is necessary to use only the MyStormshield servers to retrieve update files or licenses, or to use automatic verification via SNS...

SUSE CVE-2026-89085

A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image,...

CLEANSTART-2026-CY51593 Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer

CVE-2026-56851 affects multiple packages. The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer. See references for individual vulnerability details...

SUSE CVE-2026-97380

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the GRANT PROXY statement treats an IDENTIFIED clause with an empty password as though authentication were not specified, causing it to check the wrong grantor...

HMS Networks PEAK-System Device Driver Setup buffer error vulnerability

Versions 5.1.2.1151 and earlier of the HMS Networks PEAK-System Device Driver, as well as PCAN Windows CAN device drivers versions 5.1.2 and earlier, contain a buffer error vulnerability. This vulnerability arises because the PCAN processing path for type 0x4030 dereferences an object pointer tha...

Apache Cocoon resource management error vulnerability

All versions of Apache Cocoon are affected by a resource management error vulnerability. This vulnerability stems from improper restrictions on recursive entity references within DTDs XML entity extensions. XEE in fp: form processor may lead to Server-Side Request Forgery SSRF, potentially exposi...

Google Chrome input validation error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain an input validation error vulnerability. This vulnerability stems from improper input validation in ANGLE and may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Apache Tomcat resource management error vulnerabilities

The Apache Tomcat versions from 11.0.0-M21 to 11.0.26, from 10.1.25 to 10.1.60, and from 9.0.90 to 9.0.122 contain a resource management error vulnerability. This vulnerability arises due to incomplete cleanup processes, which may cause intermittent failures in TLS 1.3 connections...

Apache Tomcat resource management error vulnerabilities

The Apache Tomcat versions from 11.0.0-M23 to 11.0.26, from 10.1.27 to 10.1.60, and from 9.0.92 to 9.0.122 contain a resource management error vulnerability. This vulnerability arises due to incomplete cleanup, resulting in the leakage of information from the end of one request into subsequent...

Curl input validation vulnerability

The curl version 8.7.0 to 8.22.0 has a vulnerability related to input validation errors. This vulnerability arises from writing overly long cookie names and values into the Netscape cookie jar, exceeding the line length limit. As a result, when using the --cookie option to read the same cookie ja...

curl resource management error vulnerability

The curl versions 8.10.0, 8.10.1, 8.11.0, 8.11.1, 8.12.0, 8.12.1, 8.13.0, 8.14.0, 8.14.1, 8.15.0, 8.16.0, 8.17.0, 8.18.0, 8.19.0, 8.20.0, 8.21.0, and 8.22.0 have a resource management error vulnerability. This vulnerability arises from malicious FTP, IMAP, POP3, or SMTP servers that completely...