The vulnerability of the csdlockdebug() function in the kernel/smp.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the csdlockdebug function in the kernel/smp.c module of the Linux operating system is related to improper initialization. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the cnic_cm_stop_bnx2x_hw() function in the drivers/net/ethernet/broadcom/cnic.c module of the Broadcom Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cniccmstopbnx2xhw function in the drivers/net/ethernet/broadcom/cnic.c module of the Broadcom Ethernet network adapter driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote...

The vulnerability of the bpf_crypto_crypt() function in the kernel/bpf/crypto.c module, which is part of the BPF interpreter support for the Linux operating system, allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the bpfcryptocrypt function in the kernel/bpf/crypto.c module, which is part of the Linux operating system’s BPF interpreter support, relates to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise t...

The vulnerability of the otx2_tc_add_flow() function in the drivers/net/ethernet/marvell/octeontx2/nic/otx2_tc.c file of the Ethernet network adapter driver for the Marvell-based Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the otx2tcaddflow function in the drivers/net/ethernet/marvell/octeontx2/nic/otx2tc.c file of the Ethernet network adapter driver for the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker t...

The vulnerability of the svm_vcpu_pre_run() function in the arch/x86/kvm/svm/svm.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the svmvcpuprerun function in the arch/x86/kvm/svm/svm.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to insufficient checking of exception states. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerabilities of the functions hisi_acc_vfiopci_open_device() and hisi_acc_vfiopci_close_device() in the drivers/vfio/pci/hisilicon/hisi_acc_vfiopci.c driver for VFIO device controllers in the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the functions hisiaccvfiopciopendevice and hisiaccvfiopciclosedevice in the drivers/vfio/pci/hisilicon/hisiaccvfiopci.c driver for VFIO devices in the Linux operating system is related to improper initialization. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the Modbus LibModbus library, related to buffer overflows in the stack, allows attackers to compromise data integrity and cause service failures.

The vulnerability of the Modbus LibModbus library relates to buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...

The vulnerability of the development environment for UEFI applications under EDK2, related to integer overflow, allows attackers to compromise data integrity and cause service failures.

The vulnerability of the development environment for UEFI applications under EDK2 is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...

The vulnerability of the mcba_usb component in the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the mcbausb component in the Linux operating system’s kernel is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the task_can_attach() function in the kernel/sched/core.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the taskcanattach function in the kernel/sched/core.c module of the Linux operating system is related to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

PT-2026-23714

Name of the Vulnerable Software and Affected Versions OCPP affected versions not specified Description The WebSocket endpoints do not have sufficient authentication, allowing attackers to impersonate charging stations and manipulate data transmitted to the backend. An unauthenticated attacker can...

The vulnerability in the virtualization subsystem’s arch/x86/kvm/mmu.c module on the Linux operating system’s x86 kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability in the arch/x86/kvm/mmu.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

The vulnerability of the iavf_reset_task() function in the drivers/net/ethernet/intel/iavf/iavf_main.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iavfresettask function in the drivers/net/ethernet/intel/iavf/iavfmain.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the improper shutdown or release of resources. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the Access Control web interface module in IP-telephony systems like FreePBX allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Access Control web interface module in IP-telephony systems like FreePBX allows attackers to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the console-based graphic editor ImageMagick, related to buffer overflow in dynamic memory, allows attackers to compromise the integrity and accessibility of the protected information.

The vulnerability of the console-based graphic editor ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to compromise the integrity and accessibility of the protected information...

The vulnerability of the nf_flow_table_free() function in the kernel module net/netfilter/nf_flow_table_core.c of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nfflowtablefree function in the kernel module net/netfilter/nfflowtablecore.c of the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity,...

The vulnerability of the xhci_write_64() function in the drivers/usb/host/xhci.h module of the Linux device support driver for USB chipsets allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xhciwrite64 function in the drivers/usb/host/xhci.h module of the Linux device support driver library is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker t...

CVE-2026-23767

ESC/POS, a printer control language designed by Seiko Epson Corporation, lacks mechanisms for user authentication and command authorization, does not provide controls to restrict sources or destinations of network communication, and transmits commands without encryption or integrity protection...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python311 (SUSE-SU-2026:0767-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0767-1 advisory. - CVE-2025-11468: header injection when folding a long comment in an email header containing...

SUSE SLES15 Security Update : python311 (SUSE-SU-2026:0693-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0693-1 advisory. - CVE-2025-11468: header injection when folding a long comment in an email header containing exclusively unfoldable characters...