Audio/Video Playback DoS

Vulnerability of the Audio/Video component: Playback in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient checking of unusual or exceptional states. Exploitation of this vulnerability can allow a remote attacker to cause service failures...

UTT 520W Router DoS

The vulnerability of the formFtpServerDirConfig function in the UTT 520W router software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

NGINX ngx_http_mp4_module DoS

The vulnerability of the ngxhttpmp4module module in NGINX Open Source web servers is related to integer overflow. Exploiting this vulnerability can allow attackers to cause service failures...

SUSE CVE-2026-33903

Ella Core is a 5G core designed for private networks. Versions prior to 1.7.0 panic when processing a specially crafted NGAP LocationReport message. An attacker able to send crafted NGAP messages to Ella Core can crash the process, causing service disruption for all connected subscribers. Version...

SUSE CVE-2026-33907

Ella Core is a 5G core designed for private networks. Versions prior to 1.7.0 panic when processing Authentication Response and Authentication Failure NAS message missing IEs. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all...

GitLab Resource Distribution DoS

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability allows a malicious actor to cause service interruptions remotely...

MP4Box Buffer Overflow DoS

The vulnerability of the swfdefbitsjpeg function in the MP4Box packaging engine of the GPAC multimedia platform is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service failures...

netlink_ack_tlv_len Heap Buffer Overflow DoS

The vulnerability of the netlinkacktlvlen function in the net/netlink/afnetlink.c module, which supports NETLINK socket monitoring interfaces in Linux operating systems, is related to errors in deleting confidential information before reusing it. Exploiting this vulnerability could allow an...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the l2tppreexitnet function in the net/l2tp/l2tpcore.c module of the Linux kernel is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the rxeqpdocleanup function in the drivers/infiniband/sw/rxe/rxeqp.c module of the Linux operating system’s kernel involves a pointer dereferencing issue. Exploiting this vulnerability could allow an attacker to cause a service failure...

gpio-ir-recv Remove DoS

The vulnerability of the gpioirrecvremove function in the drivers/media/rc/gpio-ir-recv.c driver for multimedia devices in the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the CIhandle function in the drivers/staging/media/av7110/av7110ca.c driver module related to Linux kernel media preparation functions is associated with unauthorized access to the indexed resource. Exploiting this vulnerability could allow an attacker to cause service failur...

Linux TCP AO DoS

The vulnerability of the tcpaoinfocmd function in the net/ipv4/tcpao.c module of the Linux operating system is related to security configuration errors. Exploiting this vulnerability can allow an attacker to cause service failures...

EUVD-2024-55531

Hirschmann Industrial IT products contain a heap overflow vulnerability in the HiLCOS web interface that allows unauthenticated remote attackers to trigger a denial-of-service condition by sending specially crafted requests to the web interface. Attackers can exploit this heap overflow to crash t...

CVE-2026-34761

Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, Ella Core panics when processing a NGAP handover failure message. An attacker able to cause a gNodeB to send NGAP handover failure messages to Ella Core can crash the process, causing service disruption for all connecte...

CVE-2026-34761

Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, Ella Core panics when processing a NGAP handover failure message. An attacker able to cause a gNodeB to send NGAP handover failure messages to Ella Core can crash the process, causing service disruption for all connecte...

CVE-2026-34761 Ella Core Panics Upon NGAP handover failure

Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, Ella Core panics when processing a NGAP handover failure message. An attacker able to cause a gNodeB to send NGAP handover failure messages to Ella Core can crash the process, causing service disruption for all connecte...

CVE-2026-34761 Ella Core Panics Upon NGAP handover failure

Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, Ella Core panics when processing a NGAP handover failure message. An attacker able to cause a gNodeB to send NGAP handover failure messages to Ella Core can crash the process, causing service disruption for all connecte...

CVE-2026-34759 OneUptime: Unauthenticated notification API endpoints - financial abuse via phone number purchase, service disruption, and SMTP credential exposure

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, multiple notification API endpoints are registered without authentication middleware, while sibling endpoints in the same codebase correctly use ClusterKeyAuthorization.isAuthorizedServiceMiddleware. Thes...

PT-2026-29899

Name of the Vulnerable Software and Affected Versions Hirschmann Industrial IT products BAT-R, BAT-F, BAT450-F, BAT867-R, BAT867-F, WLC, BAT Controller Virtual Description Hirschmann Industrial IT products are susceptible to a heap overflow in the HiLCOS web interface. Unauthenticated remote...