Tenda i12 Wireless Access Point Code Execution

The vulnerability of the formwrlSSIDget function /goform/wifiSSIDget in the Tenda i12 wireless access point software is caused by a buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...

Linux kernel trace Ring Buffer Heap Buffer Overflow DoS

The vulnerability of the rbmapvma function in the kernel/trace/ringbuffer.c module, which supports kernel tracing in Linux operating systems, is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

drivers phy qualcomm phy-qcom-qmp Heap Buffer Overflow DoS

The vulnerability of the qcomqmpPhyCreate function in the drivers/phy/qualcomm/phy-qcom-qmp.c file of the Linux kernel PHY support driver relates to the lack of memory release after the effective lifespan of the function. Exploiting this vulnerability could allow an attacker to cause a service...

CVE-2026-33215

A flaw was found in NATS-Server. A remote attacker could exploit this vulnerability by manipulating MQTT Message Queuing Telemetry Transport Client IDs. This malfeasance allows for the hijacking of client sessions and messages. This could lead to unauthorized access to sensitive information or...

CVE-2026-33027 Nginx UI: Improper Path Validation Allows Recursive Deletion of the Nginx Configuration Directory

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui configuration improperly handles URL-encoded traversal sequences. When specially crafted paths are supplied, the backend resolves them to the base Nginx configuration directory and executes the operati...

Linux F2FS Heap Buffer Overflow DoS

The vulnerability in the fs/f2fs/node.c module of the Linux operating system is related to incorrect synchronization due to an improper check of the ISCHECKPOINTED flag. Exploiting this vulnerability can allow an attacker to cause a service failure...

stm32 pinctrl function Heap Buffer Overflow DoS

The vulnerability of the stm32pctrlgetirqdomain function in the drivers/pinctrl/stm32/pinctrl-stm32.c file of the GPIO controller driver in the Linux operating system kernel is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the qcomglinkallocchannel function in the drivers/rpmsg/qcomglinknative.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Linux DMA Apple-admac Buffer Overflow DoS

The vulnerability of the admacterminateall function in the drivers/dma/apple-admac.c file of the Linux kernel is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Linux MDP3 M2M Buffer Overflow DoS

The vulnerability of the mdpm2mopen function in the drivers/media/platform/mediatek/mdp3/mtk-mdp3-m2m.c driver for multimedia devices in the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

m920x_i2c_xfer Heap Buffer Overflow DoS

The vulnerability of the m920xi2cxfer function in the drivers/media/usb/dvb-usb/m920x.c file of the multimedia device driver for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

mtk_eth_soc.c Heap Buffer Overflow DoS

The vulnerability of the mtkhwlrogetfdirall function in the drivers/net/ethernet/mediatek/mtkethsoc.c module of the Linux network adapter driver software is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

exFAT file system Heap Buffer Overflow DoS

The vulnerability of the exfatallocatebitmap function in the fs/exfat/balloc.c file of the exFAT file system in Linux’s operating system is related to the lack of checking for division by zero. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Linux kernel HFS inode buffer overflow DoS

The vulnerability of the hfswrite inode function in the fs/hfs/inode.c module of the Linux file system is related to improper memory release. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Google Chrome WebGL DoS

The vulnerability of Google Chrome’s WebGL interface is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure through the use of a specially created HTML page...

CVE-2026-33907

Ella Core is a 5G core designed for private networks. Versions prior to 1.7.0 panic when processing Authentication Response and Authentication Failure NAS message missing IEs. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all...

CVE-2026-33903

Ella Core is a 5G core designed for private networks. Versions prior to 1.7.0 panic when processing a specially crafted NGAP LocationReport message. An attacker able to send crafted NGAP messages to Ella Core can crash the process, causing service disruption for all connected subscribers. Version...

CVE-2026-30575

A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-stock.php file. The application fails to validate the "txtqty" parameter during stock entry, allowing negative values to be processed. This causes the system to decrease the inventory level...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the NGAP LocationReport message handler. An attacker can cause the process to crash and disrupt service for all connected subscribers by sending specially crafted NGAP messages. Remediation Upgrade...

Deadlock

Overview Affected versions of this package are vulnerable to Deadlock via the SCTP notification handler process. An attacker can cause the control plane to become unresponsive by sending specially crafted SCTP notifications to the N2 interface, resulting in service disruption for all subscribers...