41501 matches found
ROS-20260908-73-0053
The vulnerability in xorg-x11-drv-nvidia is related to incorrect resource blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux net/sched/act_api.c DoS
The vulnerability of the net/sched/actapi.c component in the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260908-73-0043
The vulnerability in mongodb-org is related to the lack of use of the assert function. Exploiting this vulnerability can allow a remote attacker to cause service failures...
CVE-2026-78552: Protection Mechanism Failure
The Okta Access Gateway does not apply its Lua directive restriction to the application-level custom configuration field. The field is interpolated directly into the nginx server block without inspection, resulting in execution of injected directives...
CVE-2026-77892: Protection Mechanism Failure
No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-82065: Reachable Assertion
A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with collection creation privileges to cause a persistent denial of service. Insufficient validation of user-supplied storage configuration options permits values that, once persisted to durable...
CVE-2026-82059: Reachable Assertion
An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal cluster operations. By crafting a malformed index specification within this expression, an authenticated user with read-only privileges...
CVE-2026-0084: Protection Mechanism Failure
In multiple functions of HostEmulationManager.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28634: Protection Mechanism Failure
In handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to send a USSD request without permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ROS-20260908-73-0115
The vulnerability in Vim is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...
EulerOS 2.0 SP12 : bind (EulerOS-SA-2026-3249)
According to the versions of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving a...
ROS-20260908-73-0054
The vulnerability in nvidia-kmod is related to incorrect resource blocking. Exploiting this vulnerability can allow a perpetrator to cause a service failure...
ROS-20260908-73-0075
The vulnerability of the Views component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...
ROS-20260908-73-0074
The vulnerability in mongodb-org is related to the lack of use of the assert function. Exploiting this vulnerability can allow a remote attacker to cause service failures...
Udisks Privilege Insecure DoS
The vulnerability of the program for querying and managing Udisks storage devices is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260908-73-0055
The vulnerability in nvidia-kmod relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-87145
Name of the Vulnerable Software and Affected Versions MongoDB affected versions not specified Description An authenticated user with permissions to execute aggregation pipeline stages can cause a MongoDB server mongod to crash. This occurs when the $regexFindAll expression triggers an assertion...
PT-2026-87152
Name of the Vulnerable Software and Affected Versions MongoDB Server affected versions not specified Description An internal aggregation expression was incorrectly registered as accessible to any authenticated user instead of being restricted to internal cluster operations. An authenticated user...