CVE-2020-12837

ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading images to garage doors. The magic bytes of PNG must be used...

CVE-2020-12843

ismartgate PRO 1.5.9 is vulnerable to malicious file uploads via the form for uploading sounds to garage doors. The magic bytes for WAV must be used...

CVE-2023-43637

Due to the implementation of "deriveVaultKey", prior to version 7.10, the generated vault key would always have the last 16 bytes predetermined to be "arfoobarfoobarfo". This issue happens because "deriveVaultKey" calls "retrieveCloudKey" which will always return "foobarfoobarfoobarfoobarfoobarfo...

CVE-2019-16653

An application plugin in Genius Bytes Genius Server Genius CDDS 3.2.2 allows remote authenticated users to gain admin privileges...

CVE-2006-3419

Tor before 0.1.1.20 uses OpenSSL pseudo-random bytes RANDpseudobytes instead of cryptographically strong RANDbytes, and seeds the entropy value at start-up with 160-bit chunks without reseeding, which makes it easier for attackers to conduct brute force guessing attacks...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000393)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000393 advisory. Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fragment TCP resend queues significantly more th...

PT-2026-22234

Name of the Vulnerable Software and Affected Versions Crypt::SysRandom::XS versions prior to 0.010 Description The software contains a flaw in the random bytes function where it does not properly validate the input length parameter. Supplying a negative value for length can lead to an integer...

PT-2026-6320

Name of the Vulnerable Software and Affected Versions Bytes versions 1.2.1 through 1.11.0 Description The Bytes library contains a flaw in the BytesMut::reserve function that can lead to an integer overflow. Specifically, an unchecked addition within the reclaim path of BytesMut::reserve can caus...

PT-2026-29046

Name of the Vulnerable Software and Affected Versions osrg GoBGP versions through 4.3.0 Description A weakness exists in the DecodeFromBytes function within the pkg/packet/bgp/bgp.go file of osrg GoBGP. Manipulating the data1 argument can lead to an off-by-one error. The attack can be launched...

PT-2026-29060

Name of the Vulnerable Software and Affected Versions osrg GoBGP versions through 4.3.0 Description A security issue has been identified in osrg GoBGP. The BGPHeader.DecodeFromBytes function within the BGP Header Handler component, located in the file pkg/packet/bgp/bgp.go, is susceptible to...

PT-2026-29028

Name of the Vulnerable Software and Affected Versions osrg GoBGP versions through 4.3.0 Description A security issue exists in osrg GoBGP up to version 4.3.0. The issue resides in the DecodeFromBytes function within the pkg/packet/bgp/bgp.go file, specifically in the BGP OPEN Message Handler...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993238)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993238 advisory. In the Linux kernel, the following vulnerability has been resolved: net/iucv: Fix size of interrupt data iucvirqdata needs to be 4 bytes larger. These bytes are not...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992947)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992947 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Initialize getbytesperelement's default to 1 Variables, used as denominators and...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993065)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993065 advisory. In the Linux kernel, the following vulnerability has been resolved: net: bgmac: Fix a BUG triggered by wrong bytescompl On one of our machines we got: kernel BUG at...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992683)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992683 advisory. In the Linux kernel, the following vulnerability has been resolved: net/iucv: Fix size of interrupt data iucvirqdata needs to be 4 bytes larger. These bytes are not...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992518)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992518 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes WHY When PTEBufferSizeInReques...

SUSE CVE-2023-54011

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix an issue found by KASAN Write only correct size 32 instead of 64 bytes...

CVE-2022-50756

CVE-2022-50756 — Linux kernel nvme-pci mempool alloc size fix . The vulnerability is in the nvme-pci driver where mempool allocation size was computed with a different unit than the PRP divisor, causing the worst-case number of PRP lists to be underestimated (2 lists needed instead of 1). In the ...

CVE-2023-54011

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix an issue found by KASAN Write only correct size 32 instead of 64 bytes...

CVE-2022-50689 Cobian Reflector 0.9.93 RC1 Local Denial of Service via Password Field

Cobian Reflector 0.9.93 RC1 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the password input field. Attackers can paste a large 8000-byte buffer into the password field to trigger an application crash during SFTP task configuration...