129451 matches found
CVE-2026-13491
A vulnerability was detected in 78 xiaozhi-esp32 up to 2.2.6. This vulnerability affects the function Application::GetInstance of the file main/protocols/mqttprotocol.cc of the component MQTT Goodbye Handler. Performing a manipulation of the argument sessionid results in denial of service. The...
CVE-2026-58055
nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Content-Length header and body onto reusable keep-alive backend connections, re-adding the Upgrade and Connection headers while passing Content-Length verbatim. A backend that resolves the resulting...
EUVD-2026-39978
Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6getdataprimitive libnetutil/netutil.cc, so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a craft...
CVE-2026-58058
Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6getdataprimitive libnetutil/netutil.cc, so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a craft...
Linux Distros Unpatched Vulnerability : CVE-2026-53186
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/srp: bound SRPRSP sense copy by the received length srpprocessrsp copies sense data from rsp-data + respdatalen, where respdatalen is the full 32-bit value...
Linux Distros Unpatched Vulnerability : CVE-2026-53222
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ptp: ocp: fix resource freeing order Commit a60fc3294a37 ptp: rework ptpclockunregister to disable events added a call to ptpdisableallevents which changes the...
Linux Distros Unpatched Vulnerability : CVE-2026-56770
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libais through 0.15 VdmStream::AddLine uses an unchecked sentinel value as a vector index when processing AIS sentences with empty or out-of-range sequential...
IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN
...
xfrm: espintcp: do not reuse an in-progress partial send
...
RDMA/srp: bound SRP_RSP sense copy by the received length
...
bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb
...
ppp: require CAP_NET_ADMIN in target netns for unattached ioctls
...
sctp: fix uninit-value in __sctp_rcv_asconf_lookup()
...
net/802/mrp: fix vector attribute parsing in mrp_pdu_parse_vecattr
...
nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers
...
Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error
...
sctp: stream: fully roll back denied add-stream state
...
Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER
...