10149 matches found
CVE-2026-12522 Stack buffer overflow in Zephyr hl7800 modem driver parsing network-supplied +CGCONTRDP address fields
The HL7800 cellular modem driver's +CGCONTRDP: response handler oncmdatcmdinfoipaddr in drivers/modem/vendorstandalone/hl7800.c parses the PDP-context dynamic parameters local address, subnet mask, gateway, and DNS servers that the cellular network assigns to the device. The response is linearize...
CVE-2026-12633 Out-of-bounds write in IPv6 6LoWPAN Context Option handling via unauthenticated Router Advertisement
The IPv6 neighbor-discovery code in subsys/net/ip/ipv6nbr.c processes the 6LoWPAN Context Option 6CO, RFC 6775 carried inside ICMPv6 Router Advertisements. In handlera6co the 8-bit contextlen field is taken directly from the packet and was never bounded to the RFC maximum of 128. The function...
CVE-2026-16848
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of shell metacharacters in DHCP options...
CVE-2026-16842
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...
CVE-2026-71869
creationtimestamp| type| source ---|---|--- 2026-08-19 20:10:59+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthk2b3kuc2u 2026-08-20 00:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mthxxotjuz2u 2026-09-03 19:32:48+00:00| seen|...
CVE-2026-16919
CVE-2026-16919 affects IBM AIX 7.2, 7.3 and IBM PowerVM VIOS 4.1 . The root cause is improper validation of network-supplied pointers , allowing a remote, unauthenticated attacker to execute arbitrary code over the network. The CVSS 3.1 score is 9.8 (CRITICAL) with full impact on confidentiality,...
EUVD-2026-62875
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to achieve local privilege escalation due to an out-of-bounds write...
CVE-2026-73875
creationtimestamp| type| source ---|---|--- 2026-08-19 17:21:06+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-10...
CVE-2026-49392
Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.6.0 until 4.14.6 and 5.0.0-beta3, DB::getFile and DB::searchFile in src/syscheckd/src/db/src/file.cpp concatenate a monitored file path into SQLite row filters. On non-Windows systems,...
MINI-6H77-FG92-GC3F
Bulletin has no description...
CVE-2026-67268
Dell Command Update DCU, versions prior to 5.7.1, contain an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges and Server-side request forgery...
CVE-2026-76219
creationtimestamp| type| source ---|---|--- 2026-08-19 15:14:38+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117122824236412224 2026-09-08 22:35:49+00:00| published-proof-of-concept| https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-4gmw-gg2m-w46p...
CVE-2026-76234
creationtimestamp| type| source ---|---|--- 2026-08-19 15:00:29+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtgyoz4xqn27 2026-08-19 16:01:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4khnvrycgyzto...
MINI-QPPG-6CMM-5Q74
Bulletin has no description...
MINI-73P8-4X7W-28PR
Bulletin has no description...
MINI-V3XV-2VQ7-8GX3
Bulletin has no description...
MINI-6VFX-QC99-JGW8
Bulletin has no description...
MINI-7272-835C-PQ4X
Bulletin has no description...