adminer_CVE-2021-43008

CVE-2021-43008 — Vulnerabilidad Adminer Lectura arbitraria de archivos a través de un servidor MySQL malicioso 1. ¿Qué es Adminer? Adminer es una herramienta web PHP que permite administrar fácilmente bases de datos MySQL, PostgreSQL, SQLite o SQL Server. Se despliega comúnmente como una...

CVE-2026-104420

Zebra before 6.3.0 contains a protection mechanism failure that allows unauthenticated peers to evade misbehavior scoring by supplying invalid gossiped blocks. The inbound cleanup step wrongly downcasts RouterError to VerifyBlockError and discards the score, so attackers can repeatedly force bloc...

CVE-2026-104420 Zebra before 6.3.0 Peer Misbehavior Ban Bypass via Gossiped Blocks

Zebra before 6.3.0 contains a protection mechanism failure that allows unauthenticated peers to evade misbehavior scoring by supplying invalid gossiped blocks. The inbound cleanup step wrongly downcasts RouterError to VerifyBlockError and discards the score, so attackers can repeatedly force bloc...

CVE-2026-104420

The Zebra software (versions before 6.3.0 ) contains a protection mechanism failure that allows unauthenticated peers to evade misbehavior scoring. The vulnerability occurs during an inbound cleanup step where the system wrongly downcasts RouterError to VerifyBlockError , causing the associated s...

CVE-2026-104420 Zebra before 6.3.0 Peer Misbehavior Ban Bypass via Gossiped Blocks

Zebra before 6.3.0 contains a protection mechanism failure that allows unauthenticated peers to evade misbehavior scoring by supplying invalid gossiped blocks. The inbound cleanup step wrongly downcasts RouterError to VerifyBlockError and discards the score, so attackers can repeatedly force bloc...

EUVD-2026-91431

Zebra before 6.3.0 contains a protection mechanism failure that allows unauthenticated peers to evade misbehavior scoring by supplying invalid gossiped blocks. The inbound cleanup step wrongly downcasts RouterError to VerifyBlockError and discards the score, so attackers can repeatedly force bloc...

The vulnerability of the AddTime() function in the routers/api/v1/repo/issue_tracked_time.go file of the Git repository management system Gitea allows a attacker to cause a service failure.

The vulnerability of the AddTime function in the routers/api/v1/repo/issuetrackedtime.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

ROS-20261002-73-0149

The vulnerability of the gbase64encodeclose function in the GLib library is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to cause a service failure...

The vulnerability of the AddPackageTag() function in the routers/api/packages/npm/npm.go file of the Git repository management system Gitea allows a hacker to cause a service failure.

The vulnerability of the AddPackageTag function in the routers/api/packages/npm/npm.go file of the Git repository management system Gitea is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Git repository management system Gitea, related to the use of a name with an incorrect link, allows a hacker to trigger a service failure.

The vulnerability of the Git repository management system Gitea is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

ROS-20261002-73-0159

The vulnerability in rsync relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the parseKeyString() function in the models/asymkey/ssh_key_parse.go file of the Git repository management system Gitea allows a attacker to cause a service failure.

The vulnerability of the parseKeyString function in the models/asymkey/sshkeyparse.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to cause service failures...

ROS-20261002-73-0122

The vulnerability of the batandvtpackunordered function in the batman-adv module of the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261002-73-0123

The vulnerability of the iopollgetownership function in the Linux operating system’s kernel is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to trigger a service failure...

ROS-20261002-73-0124

The vulnerability of the brpassframeup function in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261002-73-0153

The vulnerability of the Rsync file transfer and synchronization utility is related to errors in processing parameter length settings. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20261002-73-0150

The vulnerability of the gunichartoutf8 function in the GLib library is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to cause a service failure...

ImageMagick < 6.9.13-40 / 7.x < 7.1.2-15 Vulnerability

The remote host has a version of ImageMagick installed that is prior to 6.9.13-40, or 7.x prior to 7.1.2-15. It is, therefore, affected by a vulnerability. - ImageMagick before 7.1.2-15 and before 6.9.13-40 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCac...

ROS-20261002-73-0129

The vulnerability in perl-DBI is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261002-73-0140

The vulnerability in Jetty is related to incorrect data encoding according to the Punycode standard. Exploiting this vulnerability can allow a remote attacker to cause failures in the web application...