Apache Traffic Server deserialization injection vulnerability

Apache Traffic Server is a high-performance HTTP proxy server open source from the Apache Foundation in the United States. Apache Traffic Server has a deserialization injection vulnerability, which stems from improper handling of disk cache fields and object lifecycle management. Attackers can...

Security update for samba

This update for samba fixes the following issues CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server bsc1271672. CVE-2026-15779: pamwinbind module with mkhomedir set allows chown of critical system paths without validation bsc1271469. CVE-2026-58216: 6-byte heap...

Security update for samba

This update for samba fixes the following issues CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server bsc1271672. CVE-2026-15779: pamwinbind module with mkhomedir set allows chown of critical system paths without validation bsc1271469. CVE-2026-58216: 6-byte heap...

CVE-2026-51270

...

CVE-2026-51270

The CVE-2026-51270 records a heap-based buffer overflow in the ESP32- AudioI2S 3.4.5 component’s htmlToUTF8() HTML entity decoding function. An attacker-controlled HTML entity can trigger a heap out-of-bounds write via memmove/memcpy without validating remaining buffer size, potentially enabling ...

CVE-2026-51267

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2026-42792

Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts epmd allows an unauthenticated remote attacker to permanently terminate the Erlang Port Mapper Daemon epmd via connection slot exhaustion. The doaccept function in erts/epmd/src/epmdsrv.c calls epmdcleanupexit when accep...

PT-2026-64980

Name of the Vulnerable Software and Affected Versions SQLite version 3.41 Description A use-after-free flaw exists in the jsonRemoveFunc function of the SQLite JSON module. The issue occurs because a parsed JSON object is freed, but the system subsequently attempts to call jsonLookupStep using th...

SUSE CVE-2026-21723

The alertmanager templates test endpoint /api/alertmanager/grafana/config/api/v1/templates/test can execute templates with no memory limits. Mass-executing templates in a short period causes OOM and crashes the Grafana service. The endpoint requires very low privileges and is exploitable with...

The vulnerability of the console-based graphic editor ImageMagick, related to executing a loop with an unavailable exit condition, allows a hacker to cause a service failure.

The vulnerability of the console-based graphic editor ImageMagick is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...

EUVD-2026-48375

An unauthenticated attacker could trigger an Out of Memory condition to crash the Java process for RHCS by repeatedly sending HTTP requests to the TLS endpoint. Depending on how the RHCS server is configured, a manual intervention to restart it may prove necessary...

EUVD-2026-46527

Vulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Oracle Net Services...

CVE-2026-47275 nanomq NULL Pointer Dereference in MQTTv5 Client CONNECT Decoder Leading to Remote DoS

In nanomq versions 0.24.11 and earlier, a NULL pointer dereference in nnimqttv5msgdecodeconnect allows a malicious MQTT broker to crash any connecting NanoMQ MQTTv5 client including bridge mode with a single packet, causing remote denial of service via SIGSEGV. In nnimqttv5msgdecodeconnect...

Vulnerability of the rdp_write_logon_info_v2() function in the RDP client FreeRDP, allowing a hacker to cause a service failure

The vulnerability of the rdpwritelogoninfov2 function in the RDP client FreeRDP is related to pointer swapping errors. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

Exploit for CVE-2026-54992

CVE-2026-54992 PoC Proof of concept for the Microsoft Message...

ROS-20260713-73-0055

The vulnerability of the railwindowfree function in the RDP client FreeRDP relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

EUVD-2026-42605

Cesanta Mongoose before 7.22 contains an out-of-bounds read in the built-in TLS server function mgtlsserverrecvhello, which uses an attacker-controlled sessionidlen byte from a TLS ClientHello as a buffer index without validating it against the length of received data. A remote, unauthenticated...

EUVD-2026-42593

A vulnerability has been identified in CPCI85 Central Processing/Communication All versions V26.20, SICORE Base system All versions V26.20.0. The affected application includes a debugging interface that is accessible through HTTP endpoints. This could allow an authenticated attacker to disrupt th...

The vulnerability of the NewXMLTree method in the ImageMagick console-based graphics editor allows a hacker to trigger a service failure.

The vulnerability of the NewXMLTree method in the ImageMagick console-based graphics editor is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2024-21051

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.34 and prior. Easily exploitable...