The vulnerability of the `__acquires()` function in the drivers/usb/chipidea/udc.c module of the Linux operating system’s USB device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the acquires function in the drivers/usb/chipidea/udc.c module of the Linux device driver framework is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...

The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems allows attackers to disclose protected information.

The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to the transmission of critical information in open text. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the s3fwrn82_uart_read() function in the drivers/nfc/s3fwrn5/uart.c file of the Linux operating system’s NFC driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the s3fwrn82uartread function in the drivers/nfc/s3fwrn5/uart.c file of the Linux NFC driver module is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the q54sj108a2debugfs_read() function in the drivers/hwmon/pmbus/q54sj108a2.c file of the device monitoring driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the q54sj108a2debugfsread function in the drivers/hwmon/pmbus/q54sj108a2.c file, a driver for hardware monitoring in the Linux operating system, involves copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerabilit...

The vulnerability of the punkt_pickle_load() function in the Natural Language processing and statistical processing library package allows a hacker to execute arbitrary code.

The vulnerability of the punktpickleload function in the NLTK library for symbolic and statistical processing of natural language is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the getTarSpec() function in the tools/rpmbuild.cc component of the RPM package manager allows a hacker to execute arbitrary code.

The vulnerability of the getTarSpec function in the tools/rpmbuild.cc component of the RPM package manager is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the vcn_v3_0_dec_msg() function in the drivers/gpu/drm/amd/amdgpu/vcn_v3_0.c driver for AMD GPU cores in the Direct Rendering Infrastructure (DRI) of the Linux operating system allows a hacker to access protected information or cause a service failure.

The vulnerability of the vcnv30decmsg function in the drivers/gpu/drm/amd/amdgpu/vcnv30.c driver for AMD GPU cores in Linux’s Direct Rendering Infrastructure DRI kernel is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability can allow an attacker to access...

The vulnerability of the rockchip_sfc_probe() function in the drivers/spi/spi-rockchip-sfc.c driver for SPI devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rockchipsfcprobe function in the drivers/spi/spi-rockchip-sfc.c driver for SPI devices in the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the scalar_byte_swap() function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the scalarbyteswap function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter for Linux kernel, relates to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the `GitConfigParser._read()` function in the `git/config.py` module of the Python library for interacting with Git repositories in GitPython allows a attacker to execute arbitrary code.

The vulnerability of the GitConfigParser.read function in the git/config.py module of the Python library for interacting with Git repositories in GitPython is related to the implementation or modification of arguments. Exploiting this vulnerability could allow a malicious actor to execute arbitra...

PT-2026-82768

Name of the Vulnerable Software and Affected Versions Wazuh versions prior to 4.14.7 Description The ip-customblock active response script contains a path traversal flaw allowing an attacker to create or delete arbitrary files on the filesystem with root privileges. The issue occurs because the...

PT-2026-82579

AVideo before 24.0 contains a server-side request forgery vulnerability in the isSSRFSafeURL function that fails to extract embedded IPv4 addresses from NAT64, 6to4, and Teredo IPv6 transition address formats. Unauthenticated attackers can bypass SSRF protections via the LiveLinks proxy endpoint ...

PT-2026-82530

Improper input validation in the buildFilter function processor/processor.go of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-82749

A security flaw has been discovered in RooCodeInc Roo-Code up to 3.51.1. Affected by this vulnerability is the function optimizeQuery of the file src/utils/helpers.ts of the component CodeIndexManager. Performing a manipulation results in code injection. Remote exploitation of the attack is...

CVE-2026-26457

ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a null pointer dereference vulnerability in the coapdumpmsg function when processing COAP messages containing options with zero length...

EUVD-2026-67096

ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a null pointer dereference vulnerability in the coapserverhandlesession function when processing COAP messages containing URIPATH options with NULL data pointers. When the server searches for a URIPATH option matching the string "separate", ...

CVE-2026-75419

go-wind-cms GoWind before 1.0.0 has a missing authorization vulnerability. The NewAuthorizer function in app/admin/service/internal/data/data.go and app/app/service/internal/data/data.go returns a no-op authorization engine noop.State, so the authz middleware always allows requests. Any...

PT-2026-82764

An integer overflow in the target sws fuzzer function libswscale/output.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

PT-2026-82395

Name of the Vulnerable Software and Affected Versions Spring Batch versions 6.0.0 through 6.0.4 Spring Batch versions 5.2.0 through 5.2.6 Description Applications using Jackson2ExecutionContextStringSerializer to deserialize execution contexts are susceptible to a deserialization attack when an...

PT-2026-82382

A flaw has been found in boxpositron with-context-mcp up to 3.0.7. This affects the function ingest notes/teleport notes/sync notes/project folder of the file src/index.ts. Executing a manipulation can lead to path traversal. It is possible to launch the attack remotely. The exploit has been...