PT-2026-126323

Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 932: from 09-02 throug...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: redis (UTSA-2026-146133)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146133 advisory. Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted LUA script to read...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-146148)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146148 advisory. In the Linux kernel, the following vulnerability has been resolved: apparmor: fix potential UAF in aareplaceprofiles The function aareplaceprofiles was accessing...

Linux Distros Unpatched Vulnerability : CVE-2026-115919

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. Prior to 1.22.0, RNNShapeInferenceopset1to6 processes malformed RNN...

Silent Blindness: Fault Vulnerability of Hardware Malware Detectors

Hardware malware detectors HMDs classify hardware performance-counter measurements to identify malicious execution. Faults in their decision logic or parameters can weaken detection and allow malware to be classified as benign. We investigate this vulnerability through structural fault injection...

PT-2026-125537

A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file order.php. The manipulation of the argument price/title results in client-side enforcement of server-side security. It is possible to launch the attack remotely. Th...

VulnCheck KEV: CVE-2026-84999

The Pie Register Premium plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 3.8.4.0 via the pieregfileupload function. This is due to the plugin performing file type validation via wpcheckfiletype and wpcheckfiletypeandext but never checking...

ROS-20261027-73-0003

The vulnerability in the resendbytes function roamingcommon.c of the OpenSSH cryptographic library is related to errors in managing cryptographic keys. Exploitation of this vulnerability may allow a remote attacker to gain unauthorized access to protected information...

CVE-2026-117526: Improper Control of Generation of Code

A vulnerability was found in reduxjs redux-devtools 5.0.0. Affected by this vulnerability is the function evalAction of the component Remotedev Server. The manipulation of the argument action results in code injection. The attack is only possible with local access. The exploit has been made publi...

CVE-2026-57201: Out-of-bounds Write

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, a stack buffer overflow in the H.323 ooTrace trace-logging function can occur when unbounded vsprintf writes into a fixed...

CVE-2026-113775: Exposed Dangerous Method or Function

A maliciously crafted dynamic library, when loaded from an arbitrary path through the TextCommands.LoadDll command exposed by the Autodesk Fusion API, can trigger an Exposed Dangerous Function vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this...

CVE-2026-117509: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was detected in crownpku RasaNLUChi up to 0.12.2. Affected is the function Persistor.decompress of the file rasanlu/persistor.py of the component Model Persistor. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be...

CVE-2026-102816: Missing Authentication for Critical Function

An authorization vulnerability exists in the country or region configuration interface of TP-Link RE305 V3. An unauthenticated attacker on the same local network may modify the wireless regulatory region and force the device to reapply its wireless configuration. Successful exploitation may cause...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the cfg80211leaveocb function within the net/wireless/ocb.c component of the Linux kernel operating system is related to improper thread management implementation. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the apicsyncpveoifromguest function within the arch/x86/kvm/lapic.c component of the Linux kernel operating system is related to an improper thread management implementation. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux kernel DoS

The vulnerability in the cdnsi2cmasterxfer function within the drivers/i2c/buses/i2cCadence.c component of the Linux kernel is related to an improper implementation of the control flow. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux GPU DRM XE HW Engine Heap Buffer Overflow DoS

The vulnerability in the hwengineinit function within the drivers/gpu/drm/xe/xehwengine.c component of the Linux kernel system is related to improper thread management implementation. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and...

Linux kernel Uvesafb DoS

The vulnerability in the uvesafbprobe function within the drivers/video/fbdev/uvesafb.c component of the Linux kernel operating system stems from insufficient resource management during its existence. Exploitation of this vulnerability may enable an attacker to cause a denial of service...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the bttinit function within the drivers/nvdimm/btt.c component of the Linux kernel operating system is related to an improper implementation of the control flow. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the signaltaskcomplete function within the drivers/pci/doe.c component of the Linux kernel operating system is related to insufficient resource control during its existence. Exploitation of this vulnerability may allow an attacker to cause a denial of service...