55599 matches found
firefox: thunderbird: Incorrect boundary conditions in the DOM: Device Interfaces component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the DOM: Device Interfaces component...
kernel: Linux kernel: Denial of service and memory corruption in RDMA umad
A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA umad User Mode Access Device component. A local user can exploit this vulnerability by manipulating input, causing an integer underflow that leads to an out-of-bounds memory write. This memory corruption can result in a denia...
PT-2026-39808
This issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.5. An attacker with physical access to a locked device may be able to view sensitive user information...
PT-2026-51846
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the Input/Output Memory Management Unit IOMMU subsystem, which manages how devices access system memory. This occurs during device recovery when multiple memor...
PT-2026-39571
A security flaw has been discovered in D-Link DNS-320 2.06B01. This affects the function delete/rename/copy/move/chmod/chown of the file /cgi-bin/webfile mgr.cgi. The manipulation results in os command injection. The attack may be performed from remote. The exploit has been released to the public...
Meari IoT Cloud MQTT Broker EMQX 安全漏洞
Meari IoT Cloud MQTT Broker EMQX is a high-performance IoT messaging proxy service based on the MQTT protocol provided by Meari Corporation. A security vulnerability exists in the Meari IoT Cloud MQTT Broker EMQX 4.x version. This vulnerability stems from the lack of authorization for device-leve...
PT-2026-61210
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer wrap occurs in the tb property entry valid function when calculating the sum of entry-value u32 and entry-length u16. A malicious XDomain peer can provide specific values that...
D-Link DCS-935L 缓冲区错误漏洞
The D-Link DCS-935L is a router produced by D-Link Corporation. Versions of the D-Link DCS-935L prior to 1.10.01 contain a buffer error vulnerability. This vulnerability stems from the operation of the AdminPassword parameter in the SetDeviceSettings function within the HNAP Service component,...
PT-2026-39641
In Meari client applications embedding "com.meari.sdk" including CloudEdge 5.5.0 build 220, Arenti 1.8.1 build 220, and related white-label = 1.8.x, the integrated call path to openapi-euce.mearicloud.com can be abused to retrieve WAN IP data for arbitrary devices. The root cause is a server-side...
CVE-2026-36734
EDIMAX BR-6428nS V3 1.15 is vulnerable to Command Injection. An authenticated attacker with access to the network can submit crafted input to the WLAN configuration functionality. Due to insufficient input validation, the attacker is able to execute arbitrary system commands on the device...
MINI-FHXM-3P8W-2P7X
Bulletin has no description...
MINI-XRM3-VR94-G99R
Bulletin has no description...
MINI-P43H-G943-C6RP
Bulletin has no description...
MINI-M8X5-44V8-H7GX
Bulletin has no description...
MINI-W622-6VFF-7Q4H
Bulletin has no description...
MINI-35RG-PJ4X-HMXC
Bulletin has no description...
MINI-HFF3-9FQM-MMJC
Bulletin has no description...
MINI-HRP4-FR4P-QX34
Bulletin has no description...