770 matches found
PT-2026-23432
Race condition vulnerability in the permission management service. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-2584
A critical SQL Injection SQLi vulnerability has been identified in the authentication module of the system. An unauthenticated, remote attacker AV:N/PR:N can exploit this flaw by sending specially crafted SQL queries through the login interface. Due to low attack complexity AC:L and the absence o...
fs/nfsd/nfs4callback.c NFS Data Compromise
The vulnerability of the setupcallbackclient function in the fs/nfsd/nfs4callback.c module, which supports the Network File System in Linux kernels, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
PT-2026-34868
Name of the Vulnerable Software and Affected Versions Grafana Tempo versions prior to 2.8.4 Grafana Tempo versions 2.9.0 through 2.9.1 Grafana Tempo versions 2.10.0 through 2.10.1 Description An uncontrolled resource consumption issue exists where queries with large limits can trigger excessive...
Linux nilfs_relax_pressure_in_lock Heap Buffer Overflow DoS
The vulnerabilities of the nilfsrelaxpressureinlock and nilfsconstructsegment functions in the Linux operating system are related to the repeated use of previously released memory. Exploiting these vulnerabilities could allow an attacker to compromise the confidentiality, integrity, and...
CVE-2026-25547
A flaw was found in the brace-expansion component. This denial of service DoS vulnerability allows a remote attacker to provide specially crafted input containing repeated numeric brace ranges. This input causes the library to attempt an unbounded expansion, consuming excessive CPU and memory...
CVE-2026-22229
A command injection vulnerability may be exploited after the admin's authentication via the import of a crafted VPN client configuration file on the TP-Link Archer BE230 v1.2 and Deco BE25 v1.0. Successful exploitation could allow an attacker to gain full administrative control of the device,...
EUVD-2026-5006
LobeHub Vulnerable to Improper Authorization in Presigned Upload...
GHSA-273P-M2CW-6833 Rekor's COSE v0.0.1 entry type nil pointer dereference in Canonicalize via empty Message
Summary Rekor’s cose v0.0.1 entry implementation can panic on attacker-controlled input when canonicalizing a proposed entry with an empty spec.message. validate returns nil success when message is empty, leaving sign1Msg uninitialized, and Canonicalize later dereferences v.sign1Msg.Payload. Impa...
CVE-2021-22489
There is a DoS vulnerability in smartphones. Successful exploitation of this vulnerability may affect service availability...
CVE-2021-22436
There is a Logic Bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service integrity and availability...
CVE-2021-22405
There is a Configuration defects in Huawei Smartphone.Successful exploitation of this vulnerability may affect service availability...
CVE-2021-22487
There is an Out-of-bounds read vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service availability...
CVE-2022-37006
Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service availability...
CVE-2019-2877
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBo...
Zohocorp ManageEngine Endpoint Central Data Compromise
The vulnerability of software for centralized control of desktop PCs in the Zohocorp ManageEngine EndPoint Central network is related to errors in processing XML requests. Exploiting this vulnerability allows a perpetrator to execute arbitrary code using specially created XML data...
CVE-2025-31964 HCL BigFix IVR is impacted by an improper service binding configuration
Improper service binding configuration in internal service components in HCL BigFix IVR version 4.2 allows a privileged attacker to impact service availability via exposure of administrative services bound to external network interfaces instead of the local authentication interface...
CVE-2025-31964: Exposure of Sensitive Information to an Unauthorized Actor
Improper service binding configuration in internal service components in HCL BigFix IVR version 4.2 allows a privileged attacker to impact service availability via exposure of administrative services bound to external network interfaces instead of the local authentication interface...
PT-2026-33338
Name of the Vulnerable Software and Affected Versions Protobuf PHP versions prior to 5.34.0-RC1 Protobuf PHP versions prior to 4.33.6 Description A Denial of Service DoS issue exists during the parsing of untrusted input. Maliciously structured messages, specifically those containing negative...