44181 matches found
CVE-2026-27684: Improper Neutralization of Special Elements used in an SQL Command
SAP NetWeaver Feedback Notifications Service contains a SQL injection vulnerability that allows an authenticated attacker to inject arbitrary SQL code through user-controlled input fields. The application concatenates these inputs directly into SQL queries without proper validation or escaping. A...
OPENSUSE-SU-2026:10316-1 ghostty-1.3.0-1.1 on GA media
These are all security issues fixed in the ghostty-1.3.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10315-1 GraphicsMagick-1.3.46-2.1 on GA media
These are all security issues fixed in the GraphicsMagick-1.3.46-2.1 package on the GA media of openSUSE Tumbleweed...
Linux Ethernet QED Buffer Overflow
The vulnerability of the qedprotectionoverridedump function in the drivers/net/ethernet/qlogic/qed/qeddebug.c file of the Ethernet network adapter driver for the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow a remote attacker...
Linux Ethernet Network Adapter Driver otx2_ptpdestroy() Heap Buffer Overflow
The vulnerability of the otx2ptpdestroy function in the drivers/net/ethernet/marvell/octeontx2/nic/otx2ptp.c file of the Ethernet network adapter driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote...
Linux SMB Server recv_done() Function Heap Buffer Overflow DoS
The vulnerability of the recvdone function in the fs/smb/server/transportrdma.c module of the SMB server support in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the...
Linux kernel virtio_uml_probe Heap Buffer Overflow DoS
The vulnerability of the virtioumlprobe function in the arch/um/drivers/virtiouml.c file of 1 Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of...
Intel Ethernet Network Adapter Driver Heap Buffer Overflow
The vulnerability of the i40evalidatecloudfilter function in the drivers/net/ethernet/intel/i40e/i40evirtchnlpf.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow an attacke...
Linux SMB2 Compound Operation
The vulnerability of the smb2compoundop function in the fs/smb/client/smb2inode.c module, which is part of the SMB client support in Linux kernel, relates to buffer-overflow attacks. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibilit...
Linux kernel futex Heap Buffer Overflow DoS
The vulnerability of the requeuepiwakefutex function in the kernel/futex/requeue.c module of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
Intel Ethernet Network Adapter Driver Heap Buffer Overflow
The vulnerability of the i40evalidatequeuemap function in the drivers/net/ethernet/intel/i40e/i40evirtchnlpf.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacke...
Linux kernel tun_get_user() Buffer Overflow DoS
The vulnerability of the tungetuser function in the drivers/net/tun.c file of the Linux kernel’s network device driver module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
ttm_bo_validate Heap Buffer Overflow DoS
The vulnerability of the ttmbovalidate function in the drivers/gpu/drm/ttm/ttmbo.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
Linux kernel exec buffer overflow DoS
The vulnerability of the beginnewexec function in the fs/exec.c module of the Linux kernel file system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
Direct Rendering Infrastructure AMD GPU dcn303_stream_encoder_create Heap Buffer Overflow
The vulnerability of the dcn303streamencodercreate function in the drivers/gpu/drm/amd/display/dc/dcn303/dcn303resource.c file, a driver for the Direct Rendering Infrastructure DRI of AMD video cards, related to Linux operating systems, involves reading beyond the buffer boundaries. Exploiting th...
hisilicon VFIO Kernel Data Compromise
The vulnerability of the functions hisiaccvfiopciopendevice and hisiaccvfiopciclosedevice in the drivers/vfio/pci/hisilicon/hisiaccvfiopci.c driver for VFIO devices in the Linux operating system is related to improper initialization. Exploiting this vulnerability could allow an attacker to...
Linux SoC audio Heap Buffer Overflow
The vulnerability of the sofipc3controlloadbytes function in the sound/soc/sof/ipc3-topology.c sound support module of the Linux operating system’s SoC kernel is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise t...
Linux IOMMU Driver Heap Buffer Overflow DoS
The vulnerability of the dmarparseonerhsa function in the drivers/iommu/intel/dmar.c file of the Linux operating system’s IOMMU driver is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...
EUVD-2025-208431
A command injection vulnerability was identified in the web module of Archer AXE75 v1.6/v1.0 router. An authenticated attacker with adjacent-network access may be able to perform remote code execution RCE when the router is configured with sysmode=ap. Successful exploitation results in root-level...