Huawei HarmonyOS and EMUI kernel module memory misreference vulnerability (CNVD-2026-17177)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A memory misreference vulnerability exists in Huawei...

Availability Attacks without an Adversary: Evidence from Enterprise LANs

Denial-of-Service DoS conditions in enterprise networks are commonly attributed to malicious actors. However, availability can also be compromised by benign non-malicious insider behavior. This paper presents an empirical study of a production enterprise LAN that demonstrates how routine docking...

Linux blockmq Buffer Overflow DoS

The vulnerability of the blkmqhassqsched function in the block/blk-mq.c module, which supports the block-level kernel in the Linux operating system, is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

TOTOLINK N150RT Router Buffer Overflow

The vulnerability of TOTOLINK N150RT router microprogramming software lies in the fact that the operation values are stored outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

PCMan FTP Server Buffer Overflow DoS

The vulnerability of the PCMan FTP Server relates to the execution of operations beyond the buffer boundaries during the processing of the PASV parameter. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

D-Link Router Command Injection

The vulnerability of D-Link DIR-1960-US, DIR-2640-US, DIR-2660-US, DIR-3040-US, DIR-3060-US, DIR-867-US, DIR-878, DIR-882-US, DIR-882/RE, DIR-882-CA, and DIR-882-US/RE routers exists due to the lack of measures to neutralize specific elements. Exploiting this vulnerability can allow a malicious...

Tenda i21 Router Form SetUplinkInfo Data Compromise

The vulnerability of the formSetUplinkInfo /goform/setUplinkInfo function in the Tenda i21 router microprogramming software is related to buffer overflow during the processing of the pingHostIp2 parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality,...

SUSE CVE-2013-0426

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.240 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vecto...

Honeywell Experion PKS Data Compromise

The vulnerability of embedded images of safety controller and microprogrammed logic controllers Honeywell Experion PKS is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

TP-Link IP Camera Buffer Overflow

The vulnerability of TP-Link’s IP cameras with microprogrammed software, such as TP-Link NC200, TP-Link NC210, TP-Link NC220, TP-Link NC230, TP-Link NC250, TP-Link NC260, and TP-Link NC450, arises due to buffer overflow on the stack. Exploiting this vulnerability can allow an attacker, operating...

Juniper Advanced Threat Prevention Web Interface Data Compromise

The vulnerability of the web interface of Juniper Advanced Threat Prevention software for detecting and preventing threats is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of protected...

Unspecified Vulnerability in Oracle VM VirtualBox (CNVD-2017-17508)

VirtualBox is cross-platform virtualization software for x86-based systems. A security vulnerability exists in the Core component implementation of Oracle VM VirtualBox versions prior to 5.1.24, which can be exploited by attackers to compromise system confidentiality, integrity, and availability...

Java Platform Data Compromise

The vulnerability of the Java Platform-related software platform is associated with errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality, integrity, and accessibility of information through actions related to deployme...

Debian GNU/Linux Data Compromise

The Linux-modules-2.6.26-1-xen-686 package from the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Data Compromise

The Linux-image-2.6.26-1-xen-amd64 package from the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Data Compromise

The Linux-support-2.6.26-1 package from the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Local Compromise Data Compromise

Multiple vulnerabilities in the unicon-imc2 operating system package of Debian GNU/Linux; exploiting these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious actors who have...

Debian GNU/Linux Data Compromise

The multiple vulnerabilities in the Debian GNU/Linux operating system’s kernel-headers-2.6-amd64-k8 package can lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Data Compromise

The multiple vulnerabilities in the proftpd-basic package of the Debian GNU/Linux operating system may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

Debian GNU/Linux Local Compromise Data Compromise

The multiple vulnerabilities in the kernel-image-2.6-powerpc operating system of the Debian GNU/Linux distribution can be exploited, which may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited by local malicious acto...