695977 matches found
Linux kernel Heap Buffer Overflow DoS
The vulnerability in the vesafbprobe function within the drivers/video/fbdev/vesafb.c component of the Linux kernel operating system stems from insufficient resource management during its existence. Exploitation of this vulnerability may enable an attacker to cause a denial of service...
Linux kernel TLS DoS
The vulnerability in the tlsswreadsock function within the net/tls/tlssw.c component of the Linux kernel operating system is related to insufficient resource control during its existence. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...
Linux kernel Heap Buffer Overflow DoS
The vulnerability in the signaltaskcomplete function within the drivers/pci/doe.c component of the Linux kernel operating system is related to insufficient resource control during its existence. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
Linux kernel Heap Buffer Overflow DoS
The vulnerability in the cfg80211leaveocb function within the net/wireless/ocb.c component of the Linux kernel operating system is related to improper thread management implementation. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
Linux kernel Uvesafb DoS
The vulnerability in the uvesafbprobe function within the drivers/video/fbdev/uvesafb.c component of the Linux kernel operating system stems from insufficient resource management during its existence. Exploitation of this vulnerability may enable an attacker to cause a denial of service...
Linux kernel Heap Buffer Overflow DoS
The vulnerability in the binderinit function of the Linux kernel is related to insufficient resource control during its existence. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
Linux kernel Heap Buffer Overflow DoS
The vulnerability in the inetdelifa function within the net/ipv4/devinet.c component of the Linux kernel operating system is related to insufficient resource control during its existence. Exploitation of this vulnerability may allow an attacker to cause a denial of service...
Linux GPU DRM XE HW Engine Heap Buffer Overflow DoS
The vulnerability in the hwengineinit function within the drivers/gpu/drm/xe/xehwengine.c component of the Linux kernel system is related to improper thread management implementation. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and...
PT-2026-126611
A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final. The impacted element is the function queue.offer of the component ChildQueue. Performing a manipulation results in resource consumption. The attack can be initiated remotely. Upgrading to version 1.3.0.Final is sufficie...
PT-2026-127248
Thor Vector Graphics ThorVG is a production-ready vector graphics engine. Prior to 1.0.7, the SFNT/TTF font loader's SfntLoader::gen function in tvgSfntLoader.cpp reads data0 through data3 to identify the font type without first checking that the input buffer contains at least four bytes. Loading...
CVE-2026-58496: thorvg: Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine
Thor Vector Graphics ThorVG is a production-ready vector graphics engine. Prior to 1.0.7, the SFNT/TTF font loader's SfntLoader::gen function in tvgSfntLoader.cpp reads data0 through data3 to identify the font type without first checking that the input buffer contains at least four bytes. Loading...
PT-2026-125537
A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file order.php. The manipulation of the argument price/title results in client-side enforcement of server-side security. It is possible to launch the attack remotely. Th...
PT-2026-125544
A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in missing authorization. The attack can be launched remotely...
ROS-20261027-73-0011
The vulnerability in the kbdintnextdevice function within the sshd service of the OpenSSH cryptographic suite is related to access control flaws in handling the oKbdInteractiveDevices parameter, which contains a list of methods for authenticating via an interactive keyboard. Exploitation of this...
ROS-20261027-73-0005
The vulnerability in the mmanswerpamfreectx function of the OpenSSH cryptographic library is related to privilege management errors. Exploitation of this vulnerability could allow an attacker to execute arbitrary code or shut down the sshd service...
PT-2026-126373
REDAXO before 5.21.0 contains a reflected cross-site scripting vulnerability in the backend packages API, where the function parameter is concatenated into an error message rendered without HTML escaping. Attackers can lure an authenticated backend user to a crafted link containing a valid CSRF...
PT-2026-127750
Summary mlflow.crewai.autolog leaks CrewAI LLM provider API keys into MLflow trace telemetry. When a CrewAI Agent is instrumented with MLflow autologging, MLflow serializes the agent's dict and converts its fields to strings. The llm field contains the CrewAI LLM object, whose string representati...
PT-2026-126413
Admidio before 5.0.17 contains an improper access control vulnerability that allows authenticated members to register event guests by submitting the additional guests field when guests are disallowed. Attackers can set additional guests to the remaining seat count in modules/events/events...
ROS-20261027-73-0088
The EaxDecrypt function vulnerability in Wireshark’s computer network traffic analyzer is related to a buffer overflow in dynamic memory. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...
VulnCheck KEV: CVE-2024-47167
Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to Server-Side Request Forgery SSRF in the /queue/join endpoint. Gradio’s asyncsaveurltocache function allows attackers to force the Gradio server to send HTTP requests to user-controlled URLs. This...