The vulnerability of the flexcoppciremove() function in the drivers/media/pci/b2c2/flexcop-pci.c driver for multimedia devices on the PCI bus of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the flexcoppciremove function in the drivers/media/pci/b2c2/flexcop-pci.c driver for multimedia devices on the PCI bus of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the requeue_pi_wake_futex() function in the kernel/futex/requeue.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the requeuepiwakefutex function in the kernel/futex/requeue.c module of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the tun_get_user() function in the drivers/net/tun.c file of the Linux kernel’s network device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tungetuser function in the drivers/net/tun.c file of the Linux kernel’s network device driver module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

CVE-2025-69614

Incorrect Access Control via activation token reuse on the password-reset endpoint allowing unauthorized password resets and full account takeover. Affected Product: Deutsche Telekom AG Telekom Account Management Portal, versions before 2025-10-27, fixed 2025-10-31...

CVE-2025-69614

Incorrect Access Control via activation token reuse on the password-reset endpoint allowing unauthorized password resets and full account takeover. Affected Product: Deutsche Telekom AG Telekom Account Management Portal, versions before 2025-10-27, fixed 2025-10-31...

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a race condition in the espintcpclose function. This condition may lead to reusing resources after...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by the American company Google. Versions of Google Chrome prior to 146.0.7680.71 contained a resource management vulnerability. This vulnerability stemmed from a problem with the WindowDialog class, where objects were reclaimed and reused after their initi...

iccDEV 安全漏洞

iccDEV is an open-source color configuration code library developed by the International Color Consortium. Versions of iccDEV prior to 2.3.1.5 contained security vulnerabilities. These vulnerabilities stemmed from the use of the CIccCmm::AddXform function, where the heap was reused after...

PT-2026-24256

Name of the Vulnerable Software and Affected Versions Deutsche Telekom AG Telekom Account Management Portal versions prior to 2025-10-27 Description An incorrect access control issue exists due to activation token reuse on the password-reset endpoint. This allows unauthorized password resets and...

The vulnerability of the otx2_ptpdestroy() function in the drivers/net/ethernet/marvell/octeontx2/nic/otx2_ptp.c file of the Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the otx2ptpdestroy function in the drivers/net/ethernet/marvell/octeontx2/nic/otx2ptp.c file of the Ethernet network adapter driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote...

The vulnerability of the cnic_cm_stop_bnx2x_hw() function in the drivers/net/ethernet/broadcom/cnic.c module of the Broadcom Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cniccmstopbnx2xhw function in the drivers/net/ethernet/broadcom/cnic.c module of the Broadcom Ethernet network adapter driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote...

The vulnerability of the dm_pool_registermetadata_threshold() function in the drivers/md/dm-thin-metadata.c driver for multiple device-based systems (RAID and LVM) in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dmpoolregistermetadatathreshold function in the drivers/md/dm-thin-metadata.c driver for multiple device-based systems RAID and LVM in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an...

The vulnerability of the drm_sched_job_add_resv_dependencies() function in the drivers/gpu/drm/scheduler/sched_main.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the drmschedjobaddresvdependencies function in the drivers/gpu/drm/scheduler/schedmain.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to the reallocation of previously released memory. Exploiting this vulnerability could allo...

The vulnerability of the mvs_free() function in the drivers/scsi/mvsas/mv_init.c module of the Linux operating system’s SCSI device driver allows a hacker to cause a service failure.

The vulnerability of the mvsfree function in the drivers/scsi/mvsas/mvinit.c file of the Linux operating system’s SCSI device driver module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

NocoDB Access Control Error Vulnerability

NocoDB is nocodb open source an Airtable alternative . Convert any MySql, PostgreSql, Sql Server, Sqlite and MariaDb to a smart spreadsheet . An access control error vulnerability exists in versions prior to NocoDB 0.301.3. The vulnerability stems from the password reset process not undoing an...

EulerOS 2.0 SP13 : glibc (EulerOS-SA-2026-1236)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Passing too large an alignment to the memalign suite of functions memalign, posixmemalign, alignedalloc in the GNU C Library version 2.30 to 2.42 m...

EulerOS 2.0 SP13 : glibc (EulerOS-SA-2026-1272)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Passing too large an alignment to the memalign suite of functions memalign, posixmemalign, alignedalloc in the GNU C Library version 2.30 to 2.42 m...

CVE-2026-28513

Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services. Prior to 2.4.0, the OIDC token endpoint rejects an authorization code only when both the client ID is wrong and the code is expired. This allows cross-client code exchange and expired code reuse...

EUVD-2026-10409

Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services. Prior to 2.4.0, the OIDC token endpoint rejects an authorization code only when both the client ID is wrong and the code is expired. This allows cross-client code exchange and expired code reuse...

CVE-2026-28513 Pocket ID: OIDC authorization code validation uses AND instead of OR, allowing cross-client token exchange

Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to your services. Prior to 2.4.0, the OIDC token endpoint rejects an authorization code only when both the client ID is wrong and the code is expired. This allows cross-client code exchange and expired code reuse...