CVE-2026-74712

A flaw was found in the Linux kernel's vdpa/mlx5 driver. This vulnerability occurs due to an incorrect calculation of buffer length within the createdirectkeys function, causing the system to read beyond its allocated memory boundaries. A local attacker could exploit this memory corruption to...

CVE-2026-74584

A flaw was found in the Linux kernel's RDMA/bnxtre component. A local attacker with access to the RDMA device could exploit this vulnerability due to a failure to zero out a shared memory page before exposing it to userspace. This could lead to information disclosure, allowing the attacker to rea...

pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values

A remote attacker can exploit this by providing specially crafted BER/CER/DER-encoded ASN.1 data with a large exponent in the REAL value. When the application subsequently prints, logs, compares, or performs arithmetic on the decoded value, this can cause excessive CPU and memory consumption,...

The vulnerability of the JAR component in the Firefox web browser allows a hacker to trigger a service failure.

The vulnerability of the JAR component in the Firefox web browser is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the Thunderbird email client, related to reading data beyond the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of the Thunderbird email client relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the IPC web browser Firefox and the email client Thunderbird allows a hacker to trigger a service failure.

The vulnerability of the IPC web browser Firefox and the email client Thunderbird is related to context privilege switching errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the `tcp_v6_syn_recv_sock()` and `tcp_v4_syn_recv_sock()` functions in the Linux kernel allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tcpv6synrecvsock and tcpv4synrecvsock functions in the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit allows a hacker to induce a service failure.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

CVE-2022-30983

A cross-site scripting XSS vulnerability in Support chatbot in Nopaperforms Niaa-Chatbot through 2022-05-17 allows remote attackers to inject arbitrary web script or HTML via the Enter email parameter...

The vulnerability in the Firefox web browser and Thunderbird email client, related to data type conversion errors, allows attackers to access confidential data.

The vulnerability in the Firefox web browser and Thunderbird email client is related to data type conversion errors. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

The vulnerability of the CrwMap::decode0x0805() function in the src/crwimage_int.cpp component of the Exiv2 media metadata management library allows a attacker to cause a service failure.

The vulnerability of the CrwMap::decode0x0805 function in the src/crwimageint.cpp component of the Exiv2 media metadata management library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

PT-2026-80924

Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial of service. These issues include triggerable assertion failures and a stack-based buffer overflow...

Cisco Catalyst SD-WAN Manager Information Disclosure (cisco-sa-sdwan-infodis-SPuJBDCe)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. - An information disclosure vulnerability exists in the web-based management interface of Cisco Catalyst SD-WAN Manager due to insufficient access control enforcement for specific template types...

The vulnerability in the Firefox web browser, related to copying buffers without checking the input data, allows a hacker to trigger a service failure.

The vulnerability in the Firefox web browser relates to the copying of buffers without checking the input data. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the Exiv2 metadata management library, related to reading beyond the allowed buffer data limits, allows a hacker to cause a service failure.

The vulnerability of the Exiv2 metadata management library relates to reading data beyond the acceptable buffer limit. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the Erlang programming language, related to incorrect authorization, allows attackers to gain access to confidential data and influence its integrity.

The vulnerability of the Erlang programming language is related to improper authorization. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential data and influence its integrity...

The vulnerability of the JavaScript Engine component in web browsers Firefox ESR, Firefox, and the email client Thunderbird allows a hacker to trigger a service failure.

The vulnerability of the JavaScript Engine component in Firefox ESR web browsers, Firefox browsers, and the Thunderbird email client is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerabilities of the components of Firefox ESR, Firefox, and Thunderbird web browsers allow attackers to induce a service failure.

The vulnerability of the components of the Firefox ESR, Firefox, and Thunderbird web browsers relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the console-based graphic editor ImageMagick, related to pointer assignment errors, allows a hacker to trigger a service failure.

The vulnerability of the console-based graphic editor ImageMagick is related to pointer assignment errors. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability in the Firefox web browser, related to uncontrolled resource consumption, allows attackers to trigger a service failure.

The vulnerability in the Firefox web browser is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause a service failure...