CVE-2026-53763

A flaw was found in OP-TEE Trusted Execution Environment. This vulnerability involves 32-bit integer overflows within the AES-GCM cryptographic implementation. When processing large amounts of data over 512 megabytes, the system may incorrectly compute the authentication tag. This could allow a...

EUVD-2026-25038

cut: -s ignored in -z -d '' newline-delimiter mode...

nats-server: NATS Server: Protocol stream corruption and unintended operation injection via MQTT client subscription filters

A flaw was found in NATS Server. An authenticated MQTT client could exploit this by embedding protocol control characters within subscription filters. These characters would then be forwarded as NATS protocol data to route or leafnode connections, leading to the corruption of the protocol stream...

nats-server: NATS Server: Protocol stream corruption and unintended operation injection via MQTT client subscription filters

A flaw was found in NATS Server. An authenticated MQTT client could exploit this by embedding protocol control characters within subscription filters. These characters would then be forwarded as NATS protocol data to route or leafnode connections, leading to the corruption of the protocol stream...

nodejs: Node.js: Certification validation bypass in TLS host verification

A flaw was found in Node.js. An attacker can exploit a vulnerability in the Transport Layer Security TLS host verification process to bypass certification validation. This bypass could allow an attacker to intercept or alter communications, potentially leading to information disclosure or integri...

undici: Undici: Response queue poisoning on reused keep-alive sockets can lead to incorrect response delivery.

A flaw was found in undici. An attacker-controlled upstream server can exploit a vulnerability in Undici's HTTP/1.1 client, specifically related to response queue poisoning on reused keep-alive sockets. This allows the attacker to inject an unsolicited HTTP/1.1 response onto an idle socket...

undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing

A flaw was found in undici. When using Socks5ProxyAgent, undici incorrectly reuses a single connection pool across different origins. This can lead to cross-origin request routing, where sensitive credentials and data intended for one destination are sent to another. Consequently, responses from...

Use Of A Broken Or Risky Cryptographic Algorithm

BC-JAVA bcprov is vulnerable to the Use of a Broken or Risky Cryptographic Algorithm. The vulnerability is due to flaws in the G3413CTRBlockCipher implementation, where the affected cryptographic algorithm can provide weakened cryptographic protection, allowing attackers to compromise the...

CVE-2026-54891

A flaw was found in Erlang's SSL Secure Sockets Layer component. A network-positioned attacker can exploit this vulnerability by injecting unauthenticated plaintext data into a client's TLS Transport Layer Security handshake. The client application may then process this injected data as if it wer...

libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse

A flaw was found in curl. The libcurl library, used for transferring data with URLs, could improperly reuse existing network connections. This occurred even when changes to mutual Transport Layer Security mTLS settings, particularly those for client certificates, should have prevented such reuse...

HdrHistogram: HdrHistogram: Data integrity impact due to incorrect comparison

A flaw was found in HdrHistogram. This vulnerability affects the DoubleHistogram.recordValue function, which is part of the Range Check component. A local attacker can exploit this flaw by performing a specific manipulation, leading to an incorrect comparison of values. This issue primarily impac...

The vulnerability of the Generic Interface component in the software for rapid display and access to information about clients in Znuny allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Generic Interface component in the software application for rapid display and access to customer information in Znuny is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and...

The vulnerability of NVIDIA’s graphics driver series—NVS, Quadro, NVIDIA RTX, GeForce—is related to the use of memory after it is freed. This allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of NVIDIA’s graphics driver families—NVS, Quadro, NVIDIA RTX, GeForce—are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

ROS-20260702-73-0024

The vulnerability of the persistentrampostinit function in the fs/pstore/ramcore.c module, which supports the persistent storage of the Linux kernel, is related to incorrect initialization of the resource. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20260702-73-0011

The vulnerability of the gserialsuspend function in the drivers/usb/gadget/function/userial.c file of the Linux device driver framework relates to the assignment of pointers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of t...

The vulnerability of the OData service of the SAP S/4HANA software platform allows attackers to compromise the integrity of the protected information.

The vulnerability of the OData service of the SAP S/4HANA software platform is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the integrity of the protected information...

nodejs: Node.js: Certification validation bypass in TLS host verification

A flaw was found in Node.js. An attacker can exploit a vulnerability in the Transport Layer Security TLS host verification process to bypass certification validation. This bypass could allow an attacker to intercept or alter communications, potentially leading to information disclosure or integri...

rrdtool: rrdtool: Stack buffer overflow allows local code execution or denial of service

A flaw was found in rrdcached, a component of rrdtool. A local attacker with access to a rrdcached socket can exploit a stack-based buffer overflow by sending an oversized CREATE request. This vulnerability can lead to a denial of service by crashing the daemon or potentially allow for arbitrary...

The vulnerability of the NVIDIA Virtual GPU Manager driver, which allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the NVIDIA Virtual GPU Manager driver relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

ROS-20260701-73-0051

The vulnerability of the functions hcilinkkeysclear, hcismpltksclear, hcismpirksclear, and hciblockedkeysclear in the net/bluetooth/hcicore.c module of the Linux operating system’s Bluetooth subsystem is related to the reallocation of previously freed memory. Exploiting this vulnerability could...