55077 matches found
CVE-2026-63810
A flaw was found in the Linux kernel. This vulnerability allows a local user to cause a system crash, leading to a Denial of Service DoS, by attempting to mount the internal bdev pseudo-filesystem. This action triggers a null pointer dereference within the kernel, which could also potentially be...
CVE-2026-64182
A flaw was found in the Linux kernel's memory management subsystem. Specifically, the functions responsible for tracking poisoned memory blocks memblknrpoisoninc and memblknrpoisonsub fail to properly release a device reference after looking up a memory block. This oversight leads to a continuous...
CVE-2026-64180
A flaw was found in the Linux kernel's memory hotplug component. When memory blocks are removed, the removememoryblocksandaltmaps function fails to release a previously acquired reference to the memory block device. This oversight results in a memory leak, which could lead to system instability o...
MINI-933H-G6FH-99JM
Bulletin has no description...
MINI-6245-838X-CX2R
Bulletin has no description...
MINI-2CJC-X272-3H42
Bulletin has no description...
EUVD-2026-46137
A weakness has been identified in D-Link DNS-320 1.0.2. The impacted element is an unknown function of the file /web/jquery/uploader/uploadify.php. This manipulation of the argument https:/ucn9h68n9289.feishu.cn/wiki/JJcTwHz7aiKeq6kSItMcoeSUnMc?from=fromcopylink causes unrestricted upload. Remote...
EUVD-2024-55692
The Tenda TX9 V22.03.02.20 firmware has a denial of service vulnerability in the updatedevname function of the file /goform/SetOnlineDevName...
PT-2026-62108
Name of the Vulnerable Software and Affected Versions ECOS affected versions not specified Description A flaw in the web-based management interface allows a highly privileged, authenticated remote attacker to access the device filesystem. This could enable the attacker to access sensitive files o...
The vulnerability of the upload component in the /photo_center/php/uploadify.php file of the D-Link DNS-320 network storage software allows a hacker to cause a service failure.
The vulnerability of the /photocenter/php/uploadify.php component in the D-Link DNS-320 network storage software is related to errors in access control when processing the “Malicious Handler” parameter. Exploiting this vulnerability allows an attacker to cause service failures...
EulerOS Virtualization 2.12.0 : kernel (EulerOS-SA-2026-2776)
According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Input: alps - fix use-after-free bugs caused by dev3registerworkCVE-2025-68822 ext4: reject mount if bigalloc with sfirstdatablock ...
CVE-2026-63826
A flaw was found in the Linux kernel's framebuffer device fbdev component. When the storemodes function replaces a framebuffer's list of display modes, it fails to properly clear old pointers before freeing the old list. This can result in a use-after-free vulnerability, a type of memory...
CVE-2026-63822
A flaw was found in the Linux kernel's ath11k Wi-Fi driver. This vulnerability, a double free, occurs when memory buffers are incorrectly released twice during the device unbinding process after an initial firmware initialization error. This can lead to system instability or a kernel crash,...
MAL-2026-10920 Malicious code in alb-lambda-cdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27e7f2cab2ae9d15c37e236190c685c42b7d3a0ecf92b7b72e9ad00b936ff186 Package name suggests an AWS CDK construct for ALB/Lambda but the shipped code is a thin @sentry/node wrapper. The npm preinstall script runs npm...
CVE-2026-64112
A flaw was found in the Linux kernel's Rados Block Device RBD module. A race condition exists in the lockdwork draining mechanism during the unmapping of an image. This allows the lockdwork to be re-queued after it is expected to be finalized, potentially leading to rbdacquirelock executing on...
CVE-2026-63797
A flaw was found in the Linux kernel's rpmsg character device. This vulnerability, a use-after-free, occurs during the probe process when an internal pointer to a device endpoint eptdev is prematurely stored. If an error occurs during the device's addition, the eptdev memory is freed, but the...
CVE-2026-53371
A flaw was found in the Linux kernel's ionic Remote Direct Memory Access RDMA driver. A local user can exploit this vulnerability due to an unbounded read operation when displaying the nodedesc sysfs file. If the nodedesc field is not null-terminated, the system will read beyond its allocated...
CVE-2026-64121
A flaw was found in the Linux kernel's Intermediate Functional Block ifb network device. A local user with network configuration privileges can trigger a slab-out-of-bounds read by configuring an asymmetric ifb device and querying its ethtool statistics. This vulnerability can lead to a kernel...
CVE-2026-64106
A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for arm64 architecture, specifically within the virtual Generic Interrupt Controller vgic-its module. A local user in userspace can restore an Interrupt Translation Service ITS Device Table Entry DTE with a size field that...