31537 matches found
CVE-2025-47407
Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level...
JLSEC-2026-412 curl inadvertently kept the SSL session ID for connections in its cache even when the verify status...
curl inadvertently kept the SSL session ID for connections in its cache even when the verify status OCSP stapling test failed. A subsequent transfer to the same hostname could then succeed if the session ID cache was still fresh, which then skipped the verify status check...
JLSEC-2026-416 When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received...
When an application tells libcurl it wants to allow HTTP/2 server push, and the amount of received headers for the push surpasses the maximum allowed limit 1000, libcurl aborts the server push. When aborting, libcurl inadvertently does not free all the previously allocated headers and instead lea...
JLSEC-2026-418 When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP...
When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server certificate is valid, it might fail to detect some OCSP problems and instead wrongly consider the response as fine. If the returned status reports another error tha...
Security Bulletin: PyJWT Fails to Validate Critical (crit) Header Parameter, Allowing Token Acceptance
Summary PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit Critical Header Parameter defined in RFC 7515 §4.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of...
Information Exposure
org.springframework.grpc, spring-grpc-core is vulnerable to information exposure through error messages. The vulnerability is due to returning raw server-side AuthenticationException messages in the gRPC status description, which allows an attacker to gather authentication failure details and...
Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel
RK35xx Kernel Patch: CVE-2026-31431 "Copy Fail" RK35xx Copy...
PT-2026-36843
Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level...
The vulnerability of the parse_opt() function in the Cpio archiver utility allows a perpetrator to trigger a service failure.
The vulnerability of the parseopt function in the Cpio archiver utility is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the Google Chrome web browser, related to overflowing dynamic memory buffers, allows a malicious actor to trigger a service failure.
The vulnerability in the Google Chrome web browser is related to overflowing of buffers in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure through the use of a specially created PDF file...
The vulnerability of the QEMU hardware emulation software, related to insufficient input data validation, allows a hacker to trigger a service failure.
The vulnerability of the QEMU hardware emulation software is related to insufficient testing of input data. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability in the Firefox web browser and the Thunderbird email client relates to access to an uninitialized pointer, allowing a malicious actor to trigger a service failure.
The vulnerability in the Firefox web browser and the Thunderbird email client relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
CVE-2026-37458
Missing input validation in the MPREACHNLRI component of FRRouting FRR stable/10.0 to stable/10.6 allows authenticated attackers to cause a Denial of Service DoS via supplying a crafted UPDATE message...
The vulnerability of the GC component in the Firefox browser and the Thunderbird email client allows a hacker to trigger a service failure.
The vulnerability of the GC component in the Firefox browser and the Thunderbird email client is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability in the Firefox web browser and Thunderbird email client, related to uncontrolled resource consumption, allows attackers to trigger a service failure.
The vulnerability in the Firefox web browser and Thunderbird email client is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...
OESA-2026-2122 systemd security update
systemd is a system and service manager that runs as PID 1 and starts the rest of the system. Security Fixes: systemd, a system and service manager, as PID 1 hits an assert and freezes execution when an unprivileged IPC API call is made with spurious data. On version v249 and older the effect is...
Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel
CVE-2026-31431 - Copy Fail Vulnerability Proof of Concept...
crypto: ccp: Don't attempt to copy PDH cert to userspace if PSP command failed
...