CVE-2024-11040

CVE-2024-11040 vllm-project vllm 버전 0.5.2.2는 서비스 거부Denial of Service 공격에 취약합니다...

poc-h2-CVE-2026-71554

CVE-2026-71554 - h2 Duplicate Host Header Request Smuggling Primitive This is my first CVE, and I have released this PoC to document the finding and help others understand and reproduce it. CVE: CVE-2026-71554 GHSA: GHSA-6hr6-w5qg-qmwg Affected: h2 = 4.4.0 Fixed: h2 4.4.1 Severity: Medium CWE-444...

corosync-3.1.10-5.1 on GA media (moderate)

corosync-3.1.10-5.1 on GA media Announcement ID: openSUSE-SU-2026:11715-1 Rating: moderate Cross-References: CVE-2026-81665 CVE-2026-81666 CVSS scores: CVE-2026-81665 SUSE : 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-81665 SUSE : 7.7...

CVE-2026-81644

DoS vulnerability in the preview service module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-74614

Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-74612

DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-49315

DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-74611

Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-81646

CVE-2026-81646 is an out-of-bounds read vulnerability in the graphics module of Huawei consumer devices, as indicated by the vendor's September 2026 security bulletins covering phones, vision, wearables, and laptops . Successful exploitation may affect availability , with a CVSS 3.1 score of 5.9 ...

CVE-2026-81646

Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-74610

Out-of-bounds read vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-74599

DoS vulnerability in the preview service module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-74596

OOB write vulnerability in the rendering and composition module. Impact: Successful exploitation of this vulnerability may affect availability...

EUVD-2026-74595

Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2026-49311

CVE-2026-49311 is a permission control vulnerability in the event notification module affecting Huawei consumer devices (phones, vision/wearables, and laptops). The CVSS 3.1 score is 6.2 (MEDIUM) with a local attack vector , low complexity , no privileges required , and no user interaction needed...

SAP NetWeaver AS Java Denial of Service (3736494)

The version of SAP NetWeaver Application Server Java detected on the remote host is affected by a denial of service vulnerability as referenced in SAP Security Note 3736494: - SAP Process Integration SOAP Adapter allows a privileged user to send specially crafted requests containing deeply nested...

CVE-2026-9215

A cross site request forgery CSRF vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is...

CVE-2026-77110

Adobe Commerce is affected by a Path Traversal vulnerability (CWE-22) that can lead to a security feature bypass . An attacker with high privileges can access unauthorized files or directories outside intended restrictions, resulting in limited availability disruption . Exploitation requires no u...

CVE-2026-77111 Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass security measures and gain unauthorized write access, causing a limited disruption to availability...

CVE-2026-9215

A CSRF vulnerability in the web interfaces of NETGEAR XR500, XR1000, and XR1000v2 routers allows an attacker, via social engineering , to induce a router administrator into tampering with router configuration, resulting in high integrity and availability impact with no confidentiality impact. The...