PT-2026-60020

Summary This report explains a Token Injection vulnerability in vLLM’s multimodal processing. Unauthenticated, text-only prompts that spell special tokens are interpreted as control. Image and video placeholder sequences supplied without matching data cause vLLM to index into empty grids during...

EUVD-2026-28340

A remote denial-of-service vulnerability exists in the ZTE Cloud PC client uSmartview, which may lead to memory corruption and remote denial of service...

The vulnerability of the network communication library of the software-hardware systems for Siemens Fire Safety products, namely Siemens Cerberus PRO EN, Sinteso EN, and Sinteso Mobile, allows a perpetrator to cause service interruptions.

The vulnerability of the network communication library of the Siemens Cerberus PRO EN, Sinteso EN, and Sinteso Mobile fire safety systems relates to the issue where the operation data escapes from the buffer in memory during the analysis of X.509 certificates. Exploiting this vulnerability could...

The vulnerability of the Cisco AnyConnect server and the Cisco Meraki MX and Cisco Meraki Z3 Teleworker Gateway network devices allows a perpetrator to cause a service outage.

The vulnerability of the Cisco AnyConnect server and the Cisco Meraki MX and Cisco Meraki Z3 Teleworker Gateway networking devices is related to errors during the processing of a missing parameter. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

Vulnerability of the Server component: The MySQL Server database management system component, which allows a hacker to cause a service failure.

Vulnerability of the MySQL Server component: The DDL system for database management of MySQL Server is vulnerable to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the real_sdpplin.c component in the VideoLAN VLC media player software allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the realsdpplin.c component in the VideoLAN VLC media player lies in buffer overflows in the dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause service failures or execute arbitrary code using the SDP protocol...

DEBIAN-CVE-2018-10851

PowerDNS Authoritative Server 3.3.0 up to 4.1.4 excluding 4.1.5 and 4.0.6, and PowerDNS Recursor 3.2 up to 4.1.4 excluding 4.1.5 and 4.0.9, are vulnerable to a memory leak while parsing malformed records that can lead to remote denial of service...

The vulnerability of the ReadPSDImage function (coders/psd.c) in the ImageMagick console graphics editor allows a hacker to cause a service failure.

The vulnerability of the ReadPSDImage function coders/psd.c in the console-based image editing tool ImageMagick is related to the exhaustion of memory resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...