44690 matches found
CVE-2026-24918: NULL Pointer Dereference
Address read vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability...
Huawei EMUI and Huawei HarmonyOS security vulnerabilities
Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. An address reading vulnerability exists in the Huawei EMUI and Huawei HarmonyOS communication module, which can b...
K000159893: Python vulnerability CVE-2021-3737
Security Advisory Description A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerabili...
PT-2026-37592
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Multipath TCP MPTCP path manager where the kernel fails to consistently set the ID as available when removing an endpoint. This can be triggered by specific...
OPENSUSE-SU-2026:10147-1 cockpit-machines-346-2.1 on GA media
These are all security issues fixed in the cockpit-machines-346-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10148-1 cockpit-packages-4.1-2.1 on GA media
These are all security issues fixed in the cockpit-packages-4.1-2.1 package on the GA media of openSUSE Tumbleweed...
Linux kernel target_lu_gp_members-show() Data Compromise
The vulnerability of the targetlugpmembers-show function in the drivers/target/targetcoreconfigfs.c driver of the Linux kernel lies in the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility o...
Linux Android binder_inc_ref_for_node Heap Buffer Overflow
The vulnerability of the binderincrefornode function in the drivers/android/binder.c module of the Linux kernel’s communication driver with the Android kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the...
Linux kernel parse_features() Heap Buffer Overflow DoS
The vulnerability of the parsefeatures function in the drivers/md/dm-flakey.c driver for multiple device types RAID and LVM in the Linux kernel is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
OPENSUSE-SU-2026:10150-1 cockpit-subscriptions-14.4-2.1 on GA media
These are all security issues fixed in the cockpit-subscriptions-14.4-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10149-1 cockpit-repos-4.7-2.1 on GA media
These are all security issues fixed in the cockpit-repos-4.7-2.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-28831
Уязвимость языка программирования Golang связана с ошибками процедуры подтверждения подлинности сертификата. Эксплуатация уязвимости может позволить нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации...
ROS-20260205-73-0027
A vulnerability in the rseq.c component of the Linux operating system kernel is related to the reliance on unreliable input data to make security decisions. Exploitation of the vulnerability allows an attacker to impact the confidentiality and availability of protected information...
OPENSUSE-SU-2026:10151-1 python311-wheel-0.46.3-1.1 on GA media
These are all security issues fixed in the python311-wheel-0.46.3-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-25122: Uncontrolled Resource Consumption
apko allows users to build and publish OCI container images built from apk packages. From version 0.14.8 to before 1.1.0, expandapk.Split drains the first gzip stream of an APK archive via io.Copyio.Discard, gzi without explicit bounds. With an attacker-controlled input stream, this can force lar...
Linux net/sched cls_api tcf_blockbind buffer overflow
The vulnerability of the tcfblockbind function in the net/sched/clsapi.c module of the net/sched subsystem of the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...
ALSA-2026:1904 Important: resource-agents security update
The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability HA environment. Security Fixes: pyasn1: pyasn1: Denial of Service due to memory exhaustion from malforme...
at91 pinctrl driver Heap Buffer Overflow DoS
The vulnerability of the atmelpinctrlprobe function in the drivers/pinctrl/pinctrl-at91-pio4.c driver for Linux kernel’s PINCTRL output devices is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...
Availability Attacks without an Adversary: Evidence from Enterprise LANs
Denial-of-Service DoS conditions in enterprise networks are commonly attributed to malicious actors. However, availability can also be compromised by benign non-malicious insider behavior. This paper presents an empirical study of a production enterprise LAN that demonstrates how routine docking...