Linux USB Network Adapter Buffer Overflow DoS

The vulnerability of the ax88772initmdio function in the drivers/net/usb/asixdevices.c file of the Linux kernel’s USB network adapter driver is related to improper initialization of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux tc358743 Probe DoS

The vulnerability of the tc358743probe function in the drivers/media/i2c/tc358743.c driver for multimedia devices in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

hisilicon VFIO Kernel Data Compromise

The vulnerability of the functions hisiaccvfiopciopendevice and hisiaccvfiopciclosedevice in the drivers/vfio/pci/hisilicon/hisiaccvfiopci.c driver for VFIO devices in the Linux operating system is related to improper initialization. Exploiting this vulnerability could allow an attacker to...

PT-2026-24341

Name of the Vulnerable Software and Affected Versions Coral Server versions prior to 1.1.0 Description Coral Server is an open collaboration infrastructure designed for communication, coordination, trust, and payments within The Internet of Agents. Before version 1.1.0, the software permitted the...

ALSA-2026:4188 Moderate: gnutls security update

The gnutls packages provide the GNU Transport Layer Security GnuTLS library, which implements cryptographic algorithms and protocols such as SSL, TLS, and DTLS. Security Fixes: gnutls: Stack-based Buffer Overflow in gnutlspkcs11tokeninit Function CVE-2025-9820 gnutls: GnuTLS: Denial of Service vi...

EulerOS 2.0 SP13 : gnutls (EulerOS-SA-2026-1275)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the GnuTLS library, specifically in the gnutlspkcs11tokeninit function that handles PKCS11 token initialization. When a token...

CVE-2026-26148: External Initialization of Trusted Variables or Data Stores

External initialization of trusted variables or data stores in Azure Entra ID allows an unauthorized attacker to elevate privileges locally...

Intel Ethernet Network Adapter Driver Heap Buffer Overflow

The vulnerability of the i40evalidatequeuemap function in the drivers/net/ethernet/intel/i40e/i40evirtchnlpf.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacke...

Linux Kernel csdlockdebug Heap Buffer Overflow DoS

The vulnerability of the csdlockdebug function in the kernel/smp.c module of the Linux operating system is related to improper initialization. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

PT-2026-24338

Name of the Vulnerable Software and Affected Versions Azure Entra ID affected versions not specified Description An issue exists in Azure Entra ID where external initialization of trusted variables or data stores can allow an unauthorized attacker to elevate privileges locally. Recommendations At...

Linux drivers/firmware/arm_scmi DoS

The vulnerability of the drivers/firmware/armscmi components of the Linux operating system is related to memory initialization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-24206

Name of the Vulnerable Software and Affected Versions Vaadin versions 14.0.0 through 14.14.0 Vaadin versions 23.0.0 through 23.6.6 Vaadin versions 24.0.0 through 24.9.7 Vaadin versions 25.0.0 through 25.0.1 Description An authentication bypass issue exists in applications using Spring Security...

PT-2026-26500

Summary Sandboxed requester sessions could reach host-side ACP session initialization through /acp spawn. OpenClaw already blocked sessions spawn runtime: "acp" from sandboxed sessions, but the slash-command path initialized ACP directly without applying the same host-runtime guard first. Affecte...

CVE-2026-26122

Initialization of a resource with an insecure default in Azure Compute Gallery allows an authorized attacker to disclose information over a network...

EUVD-2018-21638

Surreal ToDo 0.6.1.2 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the content parameter. Attackers can supply directory traversal sequences through the content parameter in index.php to access sensitive system files li...

CVE-2018-25184 Surreal ToDo 0.6.1.2 Local File Inclusion via index.php

Surreal ToDo 0.6.1.2 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the content parameter. Attackers can supply directory traversal sequences through the content parameter in index.php to access sensitive system files li...

CVE-2018-25178

CVE-2018-25178 affects Easyndexer 1.0 and describes an arbitrary file download vulnerability in showtif.php. The issue allows unauthenticated attackers to download sensitive files by sending POST requests with arbitrary file paths in the file parameter, enabling access to configuration and initia...

CVE-2024-57854

Net::NSCA::Client versions through 0.009002 for Perl uses a poor random number generator. Version v0.003 switched to use Data::Rand::Obscure instead of Crypt::Random for generation of a random initialisation vectors. Data::Rand::Obscure uses Perl's built-in rand function, which is not suitable fo...

rtl8712 usb_read8 function DoS

The vulnerability of the usbread8 function in the drivers/staging/rtl8712/usbops.c module, which supports additional devices in the Linux operating system, is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

rtl8712 USB Intentional DoS

The vulnerability of the r871xudrvinit function in the drivers/staging/rtl8712/usbintf.c module, which supports additional devices in the Linux operating system, is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause service failures...