The vulnerability of the `epf_ntb_epc_init()` function in the `driver/pci/endpoint/functions/pci-epf-vntb.c` driver for Linux system devices allows a hacker to cause a service failure.

The vulnerability of the epfntbepcinit function in the driver/pci/endpoint/functions/pci-epf-vntb.c driver for Linux system devices related to PCI devices is associated with the race condition that occurs when a shared resource is used. Exploiting this vulnerability can allow an attacker to cause...

The vulnerability of the ocfs2_fault() function in the fs/ocfs2/mmap.c file of the Ocfs2 file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ocfs2fault function in the fs/ocfs2/mmap.c file of the Ocfs2 file system in the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the tipc_group_proto_rcv() function in the net/tipc/group.c module of the TIPC protocol implementation in Linux’s operating system allows a hacker to cause a service failure.

The vulnerability of the tipcgroupprotorcv function in the net/tipc/group.c module of the TIPC protocol implementation in Linux’s operating system is related to the possibility of integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ccs_mode_store() function in the drivers/gpu/drm/xe/xe_gt_ccs_mode.c file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ccsmodestore function in the drivers/gpu/drm/xe/xegtccsmode.c driver of the Direct Rendering Infrastructure DRI kernel of the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to cause a service...

The vulnerability of the i2c_s3cirq_nextbyte() function in the drivers/i2c/busses/i2c-s3c2410.c file of the I2C driver for the Linux operating system’s hardware layer allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the i2cs3cirqnextbyte function in the drivers/i2c/busses/i2c-s3c2410.c file of the I2C driver for the Linux operating system is related to the issue of operations going beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise...

The vulnerability of the trigger_data_free() function in the kernel/trace/traceeventstrigger.c module, which supports Linux operating system tracing, allows a hacker to cause a service failure.

The vulnerability of the triggerdatafree function in the kernel/trace/traceeventstrigger.c module, which supports kernel tracing in Linux operating systems, is related to the pointer dereferencing. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-75421

CVE-2026-75421 is a stack-buffer-underflow in the IOFile::getLine() function of aria2 versions up to and including 1.37.0 . The flaw is triggered locally without privileges or user interaction, leading to a low availability impact (potential crash) with no confidentiality or integrity impact (CVS...

PT-2026-81831

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the FindInPage function allows a remote attacker who has compromised the renderer process to leak cross-origin data through a crafted HTML page...

PT-2026-81349

QWED-MCP is a deterministic verification gateway for MCP. Prior to 0.2.1, verify math expression in src/qwed mcp/engines/math engine.py passes attacker-controlled expression and claimed result strings directly to SymPy's parse expr after only normalizing caret syntax to Python exponent syntax,...

PT-2026-81486

Chainlit is a Python framework for building production-ready conversational AI applications. From 2.4.0rc0 until 2.12.0, Chainlit deployments with features.mcp.enabled set to true in .chainlit/config.toml expose the POST /mcp endpoint without requiring authentication. For stdio transport, the...

PT-2026-81348

PraisonAI is a multi-agent teams system. Prior to praisonai 4.6.51, the Jobs API create app function mounts /api/v1/runs without authentication. Any reachable caller can submit jobs, read results, cancel runs, or delete jobs using operator credentials. The fix adds PRAISONAI JOBS API KEY middlewa...

FreeBSD Security Advisory - FreeBSD-SA-26:59.mac_do

FreeBSD Security Advisory - In FreeBSD 15.0, the kernel structure used to represent user credentials changed: previously the primary group ID was stored in the first element of the array containing the list of supplementary group IDs, whereas now the primary group ID is stored in a dedicated fiel...

PT-2026-81173

A vulnerability was detected in Fdawgs node-poppler up to 9.1.2/10.0.1. The impacted element is the function pdfInfo/pdfToText/pdfToCairo/pdfToPpm/pdfImages/pdfToHtml/pdfToPs/pdfFonts/pdfDetach/pdfAttach/pdfSeparate/pdfUnite of the file src/index.js of the component Argument Injection Handler...

PT-2026-81480

Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.3.0 through 3.3.12 OpenEXR versions 3.4.0 through 3.4.13 Description The PyOpenEXR Python bindings return stale heap data when reading a specially crafted deep scanline EXR file that utilizes layer-prefixed RGB channels. Whe...

PT-2026-81296

Name of the Vulnerable Software and Affected Versions miniOrange SAML SSO versions prior to 11.0.2 SAML SP Single Sign On – Login with ADFS versions prior to 6.4 SAML SP Single Sign On – SAML SSO login with Google Apps versions prior to 6.4 Description An authentication bypass exists due to the m...

PT-2026-81478

Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.2.0 through 3.2.10 OpenEXR versions 3.3.0 through 3.3.12 OpenEXR versions 3.4.0 through 3.4.13 Description On ILP32 builds, a heap out-of-bounds read occurs when processing a crafted RLE-compressed EXR image. The issue arise...

PT-2026-81418

Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.3.0 through 3.3.12 OpenEXR versions 3.4.0 through 3.4.13 Description A heap out-of-bounds write occurs when the exrmetrics tool processes a specially crafted deep scanline EXR file. This happens when using pixel conversion...

PT-2026-82002

Summary eml parser uses the email.utils.getaddresses function from the CPython standard library to parse e-mail headers that contain e-mail addresses such as To, Cc, Bcc, From, Reply-To, Sender, .... When the input header contains a deeply nested CFWS comment / folding white space construct, the...

PT-2026-81275

A vulnerability was determined in liketrek TREK up to 3.0.22. The affected element is the function journeyService.updateEntry of the file server/src/nest/journey/journey.controller.t of the component Journey Entry Update. This manipulation causes sql injection. It is possible to initiate the atta...

PT-2026-81475

Name of the Vulnerable Software and Affected Versions eml parser versions prior to 3.0.2 Description The header fetch parse function within the eml parser.parser.HeaderParser module uses email.utils.getaddresses to parse address-bearing e-mail headers. A deeply nested CFWS Comments and Folding...