CVE-2026-36837

TOTOLINK A3002RU V3 = V3.0.0-B20220304.1804 was discovered to contain a stack-based buffer overflow via the hostname parameter in the formMapDelDevice function...

ROS-20260429-73-0034

A vulnerability in the Intarray extension selectivity evaluation function of the PostgreSQL database management system is related to insufficient validation of the specified input data type. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code in the...

RockyLinux 8 : libxml2 (RLSA-2026:11349)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:11349 advisory. libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c CVE-2025-9714 Tenable has extracted the preceding description block...

Tenda F456 httpd fromNatlimitof Heap Buffer Overflow DoS

The vulnerability of the fromNatlimitof function in the httpd daemon of the Tenda F456 microprogramming router lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to cause service failures or execute arbitrary code by...

Unity Linux 20.1050e / 20.1070e Security Update: libxslt (UTSA-2026-014831)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-014831 advisory. A flaw was found in the exsltFuncResultComp function of libxslt, which handles EXSLT elements during stylesheet parsing. Due to improper type handling, the function...

vim security update

8.2.2637-23.0.1.el97.3 - Remove upstream references Orabug: 31197557 2:8.2.2637-23.3 - Resolves: RHEL-164965 vim: arbitrary command execution via modeline sandbox bypass 2:8.2.2637-23.2 - RHEL-155437 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin -...

Linux kernel DoS

The vulnerability of the functions pciinitafu and cxlpciinitadapter in the drivers/misc/cxl/pci.c module of the Linux kernel is related to the use of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux unregistered netdevice notify DoS

The vulnerability of the unregisternetdevicemanynotify function in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Bitrix24 CMS Code Execution

Vulnerability of the landing module of the Bitrix24 business management service for content management systems CMS: Website management is related to incorrect handling of file names used in PHP functions like include or require. Exploiting this vulnerability allows a malicious actor to execute...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the rbeprev function in Linux operating systems is related to excessive iteration. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the erofsworker function in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the scdisable function in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause kernel crashes...

Linux MMC/SD/SDIO Card Driver Heap Buffer Overflow DoS

The vulnerability of the wmtmciprobe function in the drivers/mmc/host/wmt-sdmmc.c file of the MMC/SD/SDIO card driver for the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel device driver framework Heap Buffer Overflow DoS

The vulnerability of the genpddebugadd function in the drivers/base/power/domain.c file of the Linux kernel’s bus driver module is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux kernel workqueue __acquires() Heap Buffer Overflow DoS

The vulnerability of the acquires function in the kernel/workqueue.c module of the Linux operating system is related to the race condition that occurs when a shared resource is used. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux multi-device driver Heap Buffer Overflow DoS

The vulnerability of the acquires function in the drivers/md/md-bitmap.c file of the Linux device driver module for multiple devices such as RAID and LVM is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the mpi3mrremove function in Linux operating systems is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

Linux kernel Unicode Function Use-After-Free

The vulnerability of the udfnamefromCS0 function in the fs/udf/unicode.c module of the Linux kernel file system is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux mac80211 Stack Heap Buffer Overflow DoS

The vulnerability of the stainfodestroypart1 function in the net/mac80211/stainfo.c module, part of the mac80211 stack in the Linux operating system, is related to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

Linux Kernel Remove Buffer Overflow DoS

The vulnerability of the remove function in Linux operating system kernels is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...