641398 matches found
CVE-2026-66046 Expat Denial of Service via storeAtts() Quadratic Complexity
Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts function in xmlparse.c, where processing N specified attributes with non-normalized values triggers an ON^2 linear scan of elementType-defaultAtts to determine CDATA status. ...
CVE-2026-66046 Expat Denial of Service via storeAtts() Quadratic Complexity
Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts function in xmlparse.c, where processing N specified attributes with non-normalized values triggers an ON^2 linear scan of elementType-defaultAtts to determine CDATA status. ...
CVE-2026-66046 Expat Denial of Service via storeAtts() Quadratic Complexity
Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts function in xmlparse.c, where processing N specified attributes with non-normalized values triggers an ON^2 linear scan of elementType-defaultAtts to determine CDATA status. ...
CVE-2026-66046
Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts function in xmlparse.c, where processing N specified attributes with non-normalized values triggers an ON^2 linear scan of elementType-defaultAtts to determine CDATA status. ...
CVE-2026-73997 WordPress Starter Templates by Kadence WP plugin <= 2.3.3 - Denial of Service Attack vulnerability
Unauthenticated Denial of Service Attack in Starter Templates by Kadence WP = 2.3.3 versions...
EUVD-2026-60811
Unauthenticated Denial of Service Attack in Starter Templates by Kadence WP = 2.3.3 versions...
CVE-2026-73997
The WordPress plugin Starter Templates by Kadence WP (versions ≤ 2.3.3) contains an unauthenticated denial-of-service vulnerability rated CVSS 7.5 (HIGH), allowing remote attackers to disrupt site availability with no authentication or user interaction required. No root-cause mechanism, affected ...
MINI-RQWR-93MG-8H8V
Bulletin has no description...
MINI-R79Q-P6PM-8GR7
Bulletin has no description...
MINI-P342-3R8H-MHC5
Bulletin has no description...
CVE-2026-72420
A flaw was found in the Linux kernel's md/raid5 module. A data-race condition exists between the breakstripebatchlist and raid5makerequest functions. This race can lead to a scenario where a process waits indefinitely, potentially causing a Denial of Service DoS for the system...
CVE-2026-72371
A flaw was found in the Linux kernel's AFS Andrew File System component. The afsinsertvolumeintocell function incorrectly sets the AFSVOLUMERMTREE flag on the new volume instead of the replaced volume. This error causes the old volume to be removed twice and the new volume to remain in the cell's...
CVE-2026-72161
A flaw was found in the ocfs2 component of the Linux kernel. A local user could trigger a NULL pointer dereference during the unmount process of an ocfs2 filesystem. This occurs because the system attempts to access a freed journal pointer, leading to a system crash and a Denial of Service DoS...
CVE-2026-72158
A flaw was found in the Linux kernel's FPGA Dynamic Function Link DFL subsystem. A malicious FPGA device can provide specially crafted parameter headers, causing the system to miscalculate the size of a feature region. This incorrect size can lead to a memory corruption vulnerability when data is...
CVE-2026-72156
A flaw was found in the Linux kernel's microchip-spi Field-Programmable Gate Array FPGA module. This vulnerability occurs in the mpfopsparseheader function when processing a bitstream. If a crafted bitstream sets the headersize to zero, the function attempts to read data from memory before the...
CVE-2026-72153
A flaw was found in the Linux kernel's irqchip/crossbar component. The crossbardomainfree function incorrectly uses a nulled-out hardware interrupt hwirq member as an index when attempting to free domain data. This can lead to an out-of-bounds write when resetting an interrupt mapping entry or...
CVE-2026-72150
A flaw was found in the Linux kernel's sunrpc component. The xprtcreateargs structure is allocated on the stack without initialization in rpcsysfsxprtswitchaddxprtstore. This can lead to critical fields containing uninitialized stack garbage. Exploiting this vulnerability can result in a kernel...
CVE-2026-72148
A flaw was found in the Linux kernel's dmaengine component, specifically in the dw-edma driver. This flaw occurs because the DONEINTMASK and ABORTINTMASK registers, which are shared by all Direct Memory Access DMA channels, are modified using a non-atomic read-modify-write sequence. Concurrent...
CVE-2026-72147
A flaw was found in the dw-edma-pcie component of the Linux kernel's Direct Memory Access DMA engine. This vulnerability occurs because the dwedmapcieprobe function attempts to use PCI device ID driver data as a template without verifying its presence. A local attacker, by binding a device...
