ROS-20260806-73-0004

The vulnerability of the iodynfindioregion function in the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-67592

A vulnerability exists in Apache Qpid ProtonJ2 (versions through 1.1.0 ) where the system fails to limit the number of transfer frames per incoming delivery. An authenticated attacker can exploit this lack of governance to cause excessive resource usage , potentially resulting in a denial of serv...

Libexif Heap Buffer Overflow DoS

The vulnerability of the exifmnotedatagetvalue function in the library for parsing EXIF files in Libexif files involves a numerical loss of significance. Exploiting this vulnerability could allow an attacker to cause a service failure...

Skia Graphic Library DoS

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

ANGLE DoS

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

libheif Heap Buffer Overflow DoS

The vulnerability of the HeifPixelImage::overlay function in the file format decoder and encoder of the libheif library is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Unbound DNSSEC DoS

The vulnerability of Unbound DNS server’s DNSSEC validator is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

MinIO extractMetadataFromMime DoS

The vulnerability of the extractMetadataFromMime function in the MinIO storage server is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to cause service interruptions by sending specially crafted X-Minio-Replication- headers...

PDFium DoS

The vulnerability of the PDFium component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created PDF file...

PT-2026-67923

Summary Several organization billing endpoints accept attacker-controlled Stripe identifiers subscriptionId without verifying that the identifier belongs to the authenticated user's organization. This allows an authenticated attacker to perform unauthorized Stripe subscription operations on other...

ROS-20260804-73-0010

The vulnerability of the inode.c component in the Linux operating system’s kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

ROS-20260804-73-0017

The vulnerability of the fs/btrfs kernel component in the Linux operating system relates to operations involving resources after their expiration or release. Exploiting this vulnerability allows an attacker to compromise data integrity and cause service failures...

PT-2026-67822

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.3 Description Several organization billing endpoints accept attacker-controlled Stripe identifiers without verifying that the identifier belongs to the authenticated user's organization. This allows an authenticat...

CVE-2026-70476: Improper Access Control

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, several organization billing endpoints in packages/server/src/enterprise/routes/organization.route.ts and packages/server/src/enterprise/controllers/organization.controller.ts accept...

FreeRDP Glyph Cache Buffer Overflow DoS

The vulnerabilities of the updateprocessglyphfragments and glyphcachefragmentput functions in the libfreerdp/cache/glyph.c file of the RDP client FreeRDP involve reading beyond the permitted range of memory. Exploiting these vulnerabilities could allow a malicious actor to cause service failures...

ROS-20260804-73-0022

The vulnerability of the qcom/venus/hfivenus.c component in the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability allows an attacker to cause a service failure...

ROS-20260804-73-0036

The vulnerability of the kvmallocnodenoprof function in the Linux operating system is related to the execution of operations beyond the memory buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

ROS-20260804-73-0041

The vulnerability of the functions mdiobusPhysuspend and mdiobus Phyresume in the drivers/net/phy/phydevice.c file of the Linux physical-layer network driver is related to improper termination or release of resources. Exploiting this vulnerability could allow a remote attacker to cause service...

ROS-20260804-73-0029

The vulnerability of the cfg80211checkandendcac function in the net/wireless/reg.c module, which supports wireless communication in Linux kernels, is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260803-73-0009

The vulnerability of the NGINX Plus and NGINX Open Source HTTP-server directives is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure by sending a specially crafted HTTP request...