The vulnerability of the nvmet_ctrl_free() function in the drivers/nvme/target/core.c module of the NVME kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nvmetctrlfree function in the drivers/nvme/target/core.c module of the NVME driver for the Linux operating system is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a remote attacker to cause service failure...

cve-2025-29384

Preuve de concept de l'exploit CVE-2025-29384 Vue d'ensemble Ce dépôt contient une preuve de concept PoC avancée pour CVE-2025-29384 , une vulnérabilité critique de débordement de tampon basé sur la pile découverte sur le routeur Tenda AC9 exécutant la version de firmware V15.03.05.14multi. Cette...

CVE-2026-81490

MongoDB Connector for BI (mongosqld) contains an improper error handling flaw in its schema-sampling routine. A database user who can create a view in a sampled namespace can define a view whose evaluation reliably fails. The sampling logic misclassifies the resulting server message as transient ...

AZL-98328 CVE-2026-40015 affecting package dovecot 2.3.20-1

An attacker that has valid credentials can open many connections to the imap-hibernate service and send invalid commands, which can intermittently cause an out-of-bounds read and crash the process. The crash interrupts hibernated IMAP sessions handled by the affected process, which can cause...

The vulnerability of the fcloop_t2h_xmt_ls_rsp() function in the drivers/nvme/target/fcloop.c file of the NVME driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fcloopt2hxmtlsrsp function in the drivers/nvme/target/fcloop.c file of the NVME driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Astra Linux – Vulnerability in openjdk-11

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. The supported versions affected are Java SE: 7u311, 8u301, 11.0.12; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. This easily exploitable vulnerability allows an unauthenticated...

CVE-2026-45119

MyBB versions prior to 1.8.40 expose a CSRF flaw in the Admin CP UTF-8 Conversion module. The do=all flow in admin/modules/tools/system_health.php performs ALTER TABLE operations and fulltext index rebuilds on GET requests without request verification, allowing same-site attackers to alter table ...

The vulnerability in the fs/ext4/extents.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the fs/ext4/extents.c component of the Linux operating system is related to improper memory release before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `ice_vsi_set_napi_queues()` function in the `drivers/net/ethernet/intel/ice/ice_lib.c` file of the Intel Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the icevsisetnapiqueues function in the drivers/net/ethernet/intel/ice/icelib.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the functions mlx5e_tc_del_fdb_peer_flow() and mlx5e_tc_clean_fdb_peer_flows() in the driver module drivers/net/ethernet/mellanox/mlx5/core/en_tc.c of the Mellanox Ethernet network adapter driver for the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the functions mlx5etcdelfdbpeerflow and mlx5etccleanfdbpeerflows in the driver module drivers/net/ethernet/mellanox/mlx5/core/entc.c of the Mellanox Ethernet network adapter driver for the Linux operating system is related to pointer manipulation. Exploiting this vulnerabilit...

The vulnerability of the Linux operating system’s kernel, related to improper release of memory before deleting the last reference, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to the improper release of memory before deleting the last reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the stmmac/stmmac_main.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the stmmac/stmmacmain.c component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver component drivers/pmdomain/arm/scmi_pm_domain.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/pmdomain/arm/scmipmdomain.c component in the Linux operating system is related to the failure to release resources after the expiration of their useful lifespan. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability in the Firefox web browser relates to the insecure management of privileges, allowing a perpetrator to trigger a service failure.

The vulnerability in the Firefox web browser is related to insecure management of privileges. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

CVE-2026-8798 Native entropy source retries the CPU entropy instructions without limit

In Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.1.3, the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound. RDSEED and RDRAND report failure through their carry flag, and the JNI seeding routine spun re-issuing the instruction for as long ...

CVE-2026-70619

Odysseus has a missing authorization flaw in embedding endpoint management routes (pre-commit bf325f6) that lets authenticated non-admin users overwrite server-wide embedding backend configuration via management routes that only verify session authentication. The attacker-controlled URL can cause...

CVE-2026-70619 Odysseus Missing Admin Authorization via Embedding Endpoint Routes

Odysseus before commit bf325f6 contains a missing authorization vulnerability that allows authenticated non-admin users to manage server-wide embedding backend configuration by invoking endpoint management routes that verify session authentication but omit the admin authorization guard. Attackers...

GHSA-CQJP-JF4R-H5Q9 Thumbor convolution filter allows divide-by-zero in C extension leading to remote DoS

Summary Thumbor's filters:convolution, , filter passes the user-controlled value to a C extension thumbor/ext/filters/convolution.c where it is used as a divisor for % and / without validating columns 0. When columns=0, the C code triggers undefined behavior; on x8664 this reliably results in a...

EUVD-2026-51106

VMware ESX, Workstation, and Fusion contain an out-of-bounds read vulnerability. A malicious actor with VM deployment privileges could trigger an out-of-bounds read, potentially leading to information disclosure or more likely a Denial-of-Service DoS condition of the host process. On Workstation...

CVE-2026-18188

CVE-2026-18188 describes a format-string vulnerability in the ADM’s Rsync Backup component. Affected software ranges: ADM 4.1.0–4.3.3.RUN1 and ADM 5.0.0–5.1.3.RI81. The issue arises when user-controlled rsync backup configuration or log data are processed via unsafe format-string operations, allo...