PT-2026-35256

Easy PhotoResQ 1.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Folder/filename field. Attackers can input a 6000-byte payload through the File Options dialog to trigger a denial of service condition...

PT-2026-35258

StyleWriter 1.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string. Attackers can paste a 6000-byte payload into the Pattern to Find or Advice Message fields in the Add Pattern dialog to trigger a denial of service...

Project64 security vulnerabilities

Project64 is a simulator software developed by Project64 Corporation, designed to run Nintendo 64 games on computers. Version 2.3.2 of Project64 contains a security vulnerability. This vulnerability stems from a buffer overflow in the plugin directory settings field, which could allow local...

Smarteye iSmartViewPro has security vulnerabilities

Smarteye iSmartViewPro is a remote monitoring application for webcams developed by Smarteye Company in China. Version 1.5 of Smarteye iSmartViewPro contains a security vulnerability. This vulnerability stems from an improper handling of structured data in the “Save Path for Snapshot and Record”...

Prime95 security vulnerability

Prime95 is a device stress testing software developed by Prime95 Corporation. Version 29.4b7 of Prime95 contains a security vulnerability. This vulnerability stems from a buffer overflow in the PrimeNet connection dialog box, which could allow local attackers to cause the application to crash by...

Editor Software StyleWriter security vulnerabilities

Editor Software StyleWriter is a text editing tool developed by Editor Software Company, designed to improve the clarity and quality of English writing. Version 1.0 of Editor Software StyleWriter contains a security vulnerability. This vulnerability stems from a buffer overflow issue when...

Infiltrator Network Security Scanner Security Vulnerabilities

Infiltrator Network Security Scanner is a scanning and detection tool developed by Infiltrator Corporation, designed to identify network vulnerabilities and security risks. Version 4.6 of Infiltrator Network Security Scanner contains a security vulnerability. This vulnerability stems from a buffe...

PixGPS security vulnerabilities

PixGPS is an image geolocation marking tool developed by PixGPS Inc. Based on positioning technology. Version 1.1.8 of PixGPS contains a security vulnerability. This vulnerability arises from a buffer overflow when submitting excessively long strings in the folder path input field. This could all...

Picajet RoboImport security vulnerability

Picajet RoboImport is a tool developed by Picajet Corporation that supports automated data collection and web information scraping. Version 1.2.0.72 of Picajet RoboImport contains a security vulnerability. This vulnerability arises from the refusal to serve when submitting overly long input for t...

CVE-2026-6940

A flaw was found in radare2. A local attacker can exploit a path traversal vulnerability during project deletion by crafting absolute paths. This allows the attacker to delete arbitrary directories outside the intended project storage, leading to a loss of data integrity and system availability...

CVE-2026-41988

A flaw was found in uuid. When external output buffers are used with UUID versions 3, 5, or 6, an attacker with local access may be able to cause unexpected data writes. This vulnerability could lead to low impact data integrity issues. UUID version 4 is not affected...

CVE-2026-31651

A flaw was found in the Linux kernel's mmc: vub300 driver. This vulnerability allows a local attacker to trigger a NULL-pointer dereference or use-after-free condition during device disconnection. Successful exploitation could lead to a system crash, resulting in a denial of service...

CVE-2026-42171

NSIS Nullsoft Scriptable Install System 3.06.1 before 3.12 sometimes uses the Low IL temp directory when executing as SYSTEM, allowing local attackers to gain privileges if they can cause myGetTempFileName to return 0, as shown in the references...

CVE-2026-31618

A flaw was found in the Linux kernel's fbdev subsystem, specifically affecting the tdfxfb and udlfb drivers. This vulnerability allows a local attacker to trigger a divide-by-zero error when performing the FBIOPUTVSCREENINFO operation. This can lead to a system crash, resulting in a Denial of...

CVE-2026-35376

A Time-of-Check to Time-of-Use TOCTOU vulnerability exists in the chcon utility of uutils coreutils during recursive operations. The implementation resolves recursive targets using a fresh path lookup via ftsaccpath rather than binding the traversal and label application to the specific directory...

CVE-2026-41433

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From 0.4.0 to before 0.8.0, a flaw in the Java agent injection path allows a local attacker controlling a Java workload to overwrite arbitrary host files when Java injection is enabled and OBI is...

EUVD-2026-25620

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From 0.4.0 to before 0.8.0, a flaw in the Java agent injection path allows a local attacker controlling a Java workload to overwrite arbitrary host files when Java injection is enabled and OBI is...

CVE-2026-31573

A flaw was found in the Linux kernel's verisilicon hantrovpu media driver. When the driver is built as a module, a misuse of the initconst annotation causes data to be prematurely freed. This freed memory is later accessed during driver probing or unbind-bind cycles, leading to a kernel panic and...

CVE-2026-31558

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM component. A local attacker could potentially trigger an out-of-bounds memory access by providing a negative 'cpuid' parameter to the 'kvmgetvcpubycpuid' function. This could lead to system instability or potentially other...

CVE-2026-31554

A flaw was found in the Linux kernel. A local attacker could exploit a use-after-free vulnerability by calling the sysfutexrequeue function with inconsistent flags. This could lead to a system crash, resulting in a denial of service, or potentially allow for privilege escalation...