CVE-2026-58521

A flaw was found in the Mediawiki - Cargo Extension. This vulnerability allows an attacker to inject malicious commands into database queries. This could lead to unauthorized access to sensitive information, modification of data, or disruption of the database's availability...

CVE-2026-47262 containerd image-triggered runtime DoS via unbounded group parsing

containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service DoS condition. When creating a container from this image, memory exhaustion occurs, leading to an...

The vulnerability of the microprogramming software of the SIMATIC CN 4100 communication gateway, related to unlimited distribution of resources, allows a intruder to cause a service failure.

The vulnerability of the MICROprogramming software for the SIMATIC CN 4100 communication gateway is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the authentication mechanism of the SAML-based NetScaler ADC controller (formerly Citrix ADC) and the NetScaler Gateway virtual environment access control system (formerly Citrix Gateway) allows a attacker to cause service interruptions.

The vulnerability of the SAML authentication mechanism for NetScaler ADC formerly Citrix ADC and the NetScaler Gateway virtual environment access control system formerly Citrix Gateway is related to reading data beyond the allowed range in memory. Exploiting this vulnerability could allow a...

The vulnerability of the purge_effective_progs() function in the kernel/bpf/cgroup.c module, which is part of the BPF interpreter support for the Linux operating system, allows a malicious actor to gain access to protected information or cause service failures.

The vulnerability of the purgeeffectiveprogs function in the kernel/bpf/cgroup.c module, which is part of the BPF interpreter support for the Linux operating system, relates to the execution of a loop without sufficient restrictions on its execution count. Exploiting this vulnerability could allo...

ROS-20260701-73-0028

The vulnerability in the kernel-lt is related to incorrect handling of exceptional conditions. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260701-73-0049

The vulnerability of the ramfskillsb function in the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mport_cdev_open() function in the drivers/rapidio/devices/rio_mport_cdev.c file of the RapidIO driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mportcdevopen function in the drivers/rapidio/devices/riomportcdev.c file of the RapidIO driver for the Linux operating system is related to errors during the update of the pointer counters. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the indx_read() function in the fs/ntfs3/index.c module of the NTFS file system in the Linux kernel allows a attacker to access protected information or cause service interruptions.

The vulnerability of the indxread function in the fs/ntfs3/index.c module of the NTFS file system in the Linux kernel is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...

The vulnerability of the get_core_throt_cnt() function in the tools/power/x86/turbostat/turbostat.c module of the Linux kernel allows a hacker to access protected information or cause a service failure.

The vulnerability of the getcorethrotcnt function in the tools/power/x86/turbostat/turbostat.c module of the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability may allow an attacker to access protected information or cause service failures...

ROS-20260701-73-0014

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

ROS-20260701-73-0032

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

ROS-20260701-73-0033

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

The vulnerabilities of the functions si_domain_init() and init_dmars() in the drivers/iommu/intel/iommu.c file of the Linux operating system’s IOMMU kernel driver allow a attacker to cause a service failure.

The vulnerability of the functions sidomaininit and initdmars in the drivers/iommu/intel/iommu.c file of the Linux operating system’s IOMMU driver module is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260701-73-0012

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

ROS-20260630-73-0017

The vulnerability of the runbpfprog function in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the `io.netty.handler.codec.dns.DnsCodecUtil` component of the Netty framework, which is used for developing network applications, servers, and clients, allows a attacker to cause a service failure.

The vulnerability of the io.netty.handler.codec.dns.DnsCodecUtil component in the Netty framework, which is used for developing network applications, servers, and clients, relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious...

ROS-20260630-73-0024

The vulnerability of the qlanvmelsreq function in the drivers/scsi/qla2xxx/qlanvme.c module of the Linux SCSI device driver is related to the pointer dereferencing that occurs during the attempt to start an uninitialized queue, whose functionality has been removed. Exploiting this vulnerability c...

The vulnerability of the publickey_response_success() function in the libssh2 library allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the publickeyresponsesuccess function in the libssh2 library is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures or execute arbitrary code...

The vulnerability of the ngx_http_charset_module module in NGINX Plus and NGINX Open Source web servers allows a perpetrator to gain unauthorized access to protected information or cause service failures.

The vulnerability of the ngxhttpcharsetmodule module in NGINX Plus and NGINX Open Source web servers relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or cause service...