ROS-20261002-73-0140

The vulnerability in Jetty is related to incorrect data encoding according to the Punycode standard. Exploiting this vulnerability can allow a remote attacker to cause failures in the web application...

ROS-20261002-73-0139

The vulnerability in perl-YAML-Syck is related to a violation of the buffer boundary. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261002-73-0150

The vulnerability of the gunichartoutf8 function in the GLib library is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to cause a service failure...

ROS-20261002-73-0123

The vulnerability of the iopollgetownership function in the Linux operating system’s kernel is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to trigger a service failure...

ROS-20261002-73-0122

The vulnerability of the batandvtpackunordered function in the batman-adv module of the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20261002-73-0132

The vulnerability in Xen involves blocking with unlimited external access. Exploiting this vulnerability can allow a hacker to cause a service failure...

ROS-20261002-73-0041

The vulnerability of the PostgreSQL database management system is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure...

ROS-20261002-73-0045

The vulnerability of the PostgreSQL database management system is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure...

ROS-20261002-73-0044

The vulnerability of the PostgreSQL database management system is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure...

ROS-20261002-73-0138

The vulnerability in expat is related to reading data from buffers outside of the memory boundary. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-104420: Incorrect Type Conversion or Cast

Zebra before 6.3.0 contains a protection mechanism failure that allows unauthenticated peers to evade misbehavior scoring by supplying invalid gossiped blocks. The inbound cleanup step wrongly downcasts RouterError to VerifyBlockError and discards the score, so attackers can repeatedly force bloc...

ImageMagick < 6.9.13-40 / 7.x < 7.1.2-15 Vulnerability

The remote host has a version of ImageMagick installed that is prior to 6.9.13-40, or 7.x prior to 7.1.2-15. It is, therefore, affected by a vulnerability. - ImageMagick before 7.1.2-15 and before 6.9.13-40 contains a heap-buffer-overflow read vulnerability in GetPixelIndex caused by OpenPixelCac...

The vulnerability of the AddTime() function in the routers/api/v1/repo/issue_tracked_time.go file of the Git repository management system Gitea allows a attacker to cause a service failure.

The vulnerability of the AddTime function in the routers/api/v1/repo/issuetrackedtime.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the ParseControlFile() function in the modules/packages/debian/metadata.go file of the Git repository management system Gitea allows a hacker to cause a service failure.

The vulnerability of the ParseControlFile function in the modules/packages/debian/metadata.go file of the Git repository management system Gitea is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Locale() function in the modules/web/middleware/locale.go file of the Git repository management system Gitea allows a hacker to trigger a service failure.

The vulnerability of the Locale function in the modules/web/middleware/locale.go file of the Git repository management system Gitea is related to the improper implementation of flow control. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the parseKeyString() function in the models/asymkey/ssh_key_parse.go file of the Git repository management system Gitea allows a attacker to cause a service failure.

The vulnerability of the parseKeyString function in the models/asymkey/sshkeyparse.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the AddPackageTag() function in the routers/api/packages/npm/npm.go file of the Git repository management system Gitea allows a hacker to cause a service failure.

The vulnerability of the AddPackageTag function in the routers/api/packages/npm/npm.go file of the Git repository management system Gitea is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Git repository management system Gitea, related to the use of a name with an incorrect link, allows a hacker to trigger a service failure.

The vulnerability of the Git repository management system Gitea is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

The vulnerability of the Catapult DCT2000 protocol analyzer, a traffic analyzer for computer networks by Wireshark, allows a hacker to cause a service failure.

The vulnerability of the Catapult DCT2000 protocol discoverer and the Wireshark network traffic analyzer is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow attackers to cause system failures...

sanic chunked trailer request smuggling allows hidden second request execution

DescriptionSanic's HTTP/1.1 chunked-body handling does not fully consume the trailer-part after the terminating 0\r\n chunk. Because of that, attacker-controlled bytes left in the connection buffer after the first chunked request can be interpreted as the start of a new HTTP request on the same...