axios Uncontrolled Resource Consumption

The vulnerability of the axios library is related to an uncontrolled resource consumption when processing the maxBodyLength parameter. Exploiting this vulnerability could allow a remote attacker to compromise the accessibility of the protected information...

Linux kernel hidraw_open() Buffer Overflow

The vulnerability of the hidrawopen function in the drivers/hid/hidraw.c module of the Linux device subsystem driver module is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of t...

ROS-20260529-73-0013

The vulnerability of HashiCorp’s Vault Community Edition and Vault Enterprise storage platforms relates to the disclosure of information during data transmission. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

PT-2026-34109

Name of the Vulnerable Software and Affected Versions Oracle Identity Manager Connector version 12.2.1.4.0 Description An issue in the Core component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTPS to compromise the system. This can lead to unauthorize...

Cisco Webex Auth Bypass

The vulnerability of the Cisco Webex web conferencing platform is related to errors in the authentication process. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux kernel Hfs Catalog Function Use-After-Free

The vulnerability of the hfscorrectnextunusedCNID function in the fs/hfs/catalog.c module of the Linux operating system’s kernel relates to the use of memory after deallocation. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

Linux kernel USB device support driver Heap Buffer Overflow DoS

The vulnerability of the uvcgvideopump function in the drivers/usb/gadget/function/uvcvideo.c file of the Linux device support driver module involves exposing confidential information. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ACPI Driver Privilege Escalation

The vulnerability in the drivers/acpi/acpica/psopcode.c driver of the ACPI framework an extended configuration and power management interface for Linux kernels involves accessing memory beyond the permissible buffer data boundaries due to a violation of the specifications for data transmitted to...

Linux InfiniBand SRQ Buffer Overflow DoS

The vulnerability of the rxesrqfromattr function in the drivers/infiniband/sw/rxe/rxesrq.c file of the Linux operating system’s InfiniBand driver is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

Linux kernel module Heap Buffer Overflow DoS

The vulnerability of the drmkunithelperallocdrmdevice function in the Linux kernel module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux kernel devlink_notify_unregister Heap Buffer Overflow DoS

The vulnerability of the devlinknotifyunregister function in the net/devlink/leftover.c module, which is part of the Linux kernel’s networking functions, is related to the improper generation of crash reports. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

Linux JFS dbMount() Heap Buffer Overflow

The vulnerability of the dbMount function in the fs/jfs/jfsdmap.c module of the Linux file system’s JFS kernel relates to buffer-overflow attacks. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

PowerDNS Recursor Output Validation

The vulnerability of the PowerDNS Recursor DNS server relates to the failure to take measures to neutralize special elements in the output data. Exploiting this vulnerability allows a malicious actor to compromise the integrity and accessibility of the protected information...

dify.ai parseInt() Data Compromise

The vulnerability of the parseInt function on the dify.ai development platform is related to the insufficient isolation of system-dependent functions. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected informatio...

CVE-2022-27837

A vulnerability using PendingIntent in Accessibility prior to version 12.5.3.2 in Android R11.0 and 13.0.1.1 in Android S12.0 allows attacker to access the file with system privilege...

OpenJPEG opj_jp2_read_header Buffer Overflow

The vulnerability of the opjjp2readheader function in the OpenJPEG image encoding and decoding library is related to the use of an uninitialized variable. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Linux drivers net ethernet intel ice ice_sriov_set_msix_vec_count Heap Buffer Overflow

The vulnerability of the icesriovsetmsixveccount function in the drivers/net/ethernet/intel/ice/icesriov.c file of the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibili...

Linux nfs3_proc_create Buffer Overflow

The vulnerability of the nfs3proccreate function in the fs/nfs/nfs3proc.c module of the Linux file system support module is related to improper memory release before deleting the last reference memory leak. Exploiting this vulnerability could allow an attacker to compromise the confidentiality an...

Linux cleanup_bearer() function Heap Buffer Overflow

The vulnerability of the cleanupbearer function in the net/tipc/udp-media.c module of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Apache Cassandra Privilege Bypass

The vulnerability of the distributed database management system Apache Cassandra is related to improper handling of privileges. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...