The vulnerabilities of the functions ucsi_init() and ucsi_unregister() in the driver drivers/usb/typec/ucsi/ucsi.c file of the UCSI driver for the Linux operating system allow a malicious actor to cause service failure remotely.

The vulnerability of the functions ucsiinit and ucsiunregister in the UCSI driver’s drivers/usb/typec/ucsi/ucsi.c file is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow a remote attacker to cause service failure...

The vulnerability of the attach_default_qdiscs() function in the net/sched/sch_generic.c module of the net/sched/sch subsystem of the Linux operating system’s kernel allows a attacker to cause a service failure.

The vulnerability of the attachdefaultqdiscs function in the net/sched/schgeneric.c module of the network scheduling subsystem of the Linux operating system’s kernel is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the SMB2_sess_auth_rawntlmssp_negotiate() function in the fs/cifs/smb2pdu.c module of the Linux kernel file system allows a hacker to induce a service failure.

The vulnerability of the SMB2sessauthrawntlmsspnegotiate function in the fs/cifs/smb2pdu.c module of the Linux kernel operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the lpfc_issue_els_flogi() function in the drivers/scsi/lpfc/lpfc_els.c module of the Linux SCSI device support driver allows a attacker to cause a service failure.

The vulnerability of the lpfcissueelsflogi function in the drivers/scsi/lpfc/lpfcels.c file of the Linux SCSI device support driver leads to a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-20777

The Simple Membership plugin for WordPress is vulnerable to Improper Handling of Missing Values in all versions up to, and including, 4.7.0 via the Stripe webhook handler. This is due to the plugin only validating webhook signatures when the stripe-webhook-signing-secret setting is configured,...

CVE-2026-1906

CVE-2026-1906 corresponds to a vulnerability in the PDF Invoices & Packing Slips for WooCommerce plugin for WordPress (versions up to and including 5.6.0). It enables Insecure Direct Object Reference through the wpo_ips_edi_save_order_customer_peppol_identifiers AJAX action due to missing capabil...

The vulnerability of the EcoStruxure Building Operation Workstation interface and the EcoStruxure Building Operation WebStation software’s web interface arises from incorrect restrictions on XML links to external objects. This allows attackers to gain unauthorized access to protected information or cause service failures.

The vulnerability of the EcoStruxure Building Operation Workstation interface and the EcoStruxure Building Operation WebStation software’s web interface is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability could allow an attacker to gain unauthorize...

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer, related to pointer assignment errors, allows a hacker to cause a service failure.

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure, provided that the user opens a specially crafted file...

The vulnerability of Adobe Audition’s audio editor lies in the ability to record data beyond the buffer limit in memory, which allows a hacker to cause a service failure.

The vulnerability of Adobe Audition is related to the recording of data beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to cause a service failure if the user opens a specially crafted file...

The vulnerability of the MongoDB database management system’s server allows a hacker to cause a service failure.

The vulnerability of the MongoDB database management system server is related to an uncontrolled recursion. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

CVE-2026-23596 Unauthenticated Improper Access Control in management API allows unauthorized service disruption

A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to trigger service restarts. Successful exploitation could allow an attacker to disrupt services and negatively impact system availability...

CVE-2026-23596 Unauthenticated Improper Access Control in management API allows unauthorized service disruption

A vulnerability in the management API of the affected product could allow an unauthenticated remote attacker to trigger service restarts. Successful exploitation could allow an attacker to disrupt services and negatively impact system availability...

PT-2026-20307

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A flaw exists in the management API that could allow a remote attacker without authentication to initiate service restarts. Exploitation of this issue may lead ...

CVE-2026-2032 Interrupted page loads in new tabs could allow website spoofing under trusted domains in Firefox iOS

Malicious scripts that interrupt new tab page loading could cause desynchronization between the address bar and page content, allowing the attacker to spoof arbitrary HTML under a trusted domain. This vulnerability was fixed in Firefox for iOS 147.2.1...

CVE-2026-2032

Malicious scripts that interrupt new tab page loading could cause desynchronization between the address bar and page content, allowing the attacker to spoof arbitrary HTML under a trusted domain. This vulnerability was fixed in Firefox for iOS 147.2.1...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification via the SAMLRequest DEFLATE decompression. An...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview org.keycloak:keycloak-saml-core is an Identity and Access Management plugin for Keycloak. Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification via the SAMLRequest DEFLATE decompression. An attacker can cause service disruption...

The vulnerability of the _bfd_elf_slurp_version_tables() function in the bfd/elf.c component of the GNU Binutils development environment allows a attacker to cause a service failure.

The vulnerability of the bfdelfslurpversiontables function in the bfd/elf.c component of the GNU Binutils development environment is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause service...

The vulnerability of the loadRLE() function in the TGA-image loader (PluginTARGA.cpp) from the Freeimage graphics library allows a malicious actor to cause a service failure or execute arbitrary code.

The vulnerability of the loadRLE function in the TGA-image loader PluginTARGA.cpp from the Freeimage graphics library relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to cause service interruptions or execute arbitrary code...

The vulnerability of Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM), related to writing beyond the buffer boundaries, allows attackers to trigger a service failure.

The vulnerabilities of Intel Active Management Technology AMT and Intel Standard Manageability ISM are related to writing beyond the buffer boundaries. Exploiting these vulnerabilities can allow a remote attacker to cause service interruptions...