46406 matches found
ROS-20261013-73-0169
The vulnerability of the icmpgluebits function in the net/ipv4/icmp.c module of the Linux operating system is related to the incorrect checking of the specified index, position, or offset in the input data. Exploiting this vulnerability may allow an attacker to gain access to protected informatio...
CVE-2026-85115: Generation of Error Message Containing Sensitive Information
A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API All versions V3.3.62. Affected applications do not properly redact PLC restore passwords from HTTP error exception messages. This could allow an attacker with access to logs or other diagnostic output to obtai...
ROS-20261013-73-0171
The vulnerability of the ctrlcmdbye function in the net/qrtr/ns.c module, which supports Qualcomm IPC cores in the Linux operating system, relates to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow a attacker to cause service...
ROS-20261013-73-0203
The vulnerability of the bpfprogtestrunskb function in the net/bpf/testrun.c module, which implements networking functions in the Linux kernel, is related to incorrect input of configuration data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...
ROS-20261013-73-0006
The vulnerability in the net/ipv4/icmp.c component of the Linux operating system’s kernel is related to insufficient checking of the status of shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261013-73-0465
The vulnerability of the tunxdpone function in the drivers/net/tun.c file of the Linux kernel’s network device driver leads to an infinite loop when a condition for exiting the loop is not met. Exploiting this vulnerability could allow an attacker to cause a system failure...
ROS-20261013-73-0105
The vulnerability of the pepdorcv function in the net/phonet/pep.c module, which is part of the Linux kernel’s networking functions, leads to mutual locking. Exploiting this vulnerability can allow a attacker to cause service failures...
PT-2026-112047
Name of the Vulnerable Software and Affected Versions Microsoft.NETCore.App.Runtime.linux-arm versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-arm versions 9.0.0 through 9.0.20 Microsoft.NETCore.App.Runtime.linux-arm versions 10.0.0 through 10.0.12...
PT-2026-112266
Improper limitation of a pathname to a restricted directory 'path traversal' in .NET allows an authorized attacker to elevate privileges locally...
PT-2026-112270
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
PT-2026-111979
Name of the Vulnerable Software and Affected Versions Microsoft QUIC affected versions not specified Description A heap-based buffer overflow exists in Microsoft QUIC, which could allow an unauthorized attacker to execute arbitrary code over a network. A heap-based buffer overflow occurs when a...
PT-2026-112294
Name of the Vulnerable Software and Affected Versions Microsoft.NETCore.App.Runtime.win-arm versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.win-arm64 versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.win-x64 versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.win-x86...
PT-2026-113045
Name of the Vulnerable Software and Affected Versions Microsoft.NETCore.App.Runtime.linux-arm versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-arm64 versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-musl-arm versions 8.0.0 through 8.0.31...
CVE-2026-96238: Origin Validation Error
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-96957: Improper Verification of Cryptographic Signature
Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-96237: Inclusion of Functionality from Untrusted Control Sphere
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network...
CVE-2026-96238: Origin Validation Error
Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-70190: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...