ROS-20260623-73-0036

Vulnerability in Python 3.9 related to insufficient input validation. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260623-73-0052

The vulnerability in Wireshark is related to improper management of sequential memory distribution. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260623-73-0049

The vulnerability of the pgAdmin 4 database management tool is related to the lack of measures taken to neutralize special elements in LDAP requests. Exploiting this vulnerability allows a malicious actor to cause service failures by entering special LDAP symbols in the username...

The vulnerability in the web interface for managing microprogrammed software routers UTT HiPER 1250GW allows a hacker to trigger a service failure.

The vulnerability of the web-based management interface for UTT HiPER 1250GW microprogramming software is related to buffer overflow in the stack when processing the Profile parameter. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the web interface for managing microprogrammed network devices UTT 1200GW allows a perpetrator to cause a service failure.

The vulnerability in the web interface for managing microprogrammed network devices UTT 1200GW is related to the data being written beyond the buffer boundaries in memory when processing the sysAdmUser/sysAdmPass parameter. Exploitation of this vulnerability could allow a malicious actor to cause...

etcd: etcd: Authorization bypass allows information disclosure and denial of service

A flaw was found in etcd, a distributed key-value store. Unauthorized users can bypass authentication or authorization checks when the gRPC API is exposed to untrusted clients. This allows them to access sensitive cluster topology information, disrupt operations through alarms, interfere with lea...

httpd: httpd: HTTP/2 Remote Denial of Service via compression bomb and Slowloris-style attack

A flaw was found in HTTP/2, affecting various web servers. A remote attacker can exploit this vulnerability by combining an HPACK compression bomb with a zero-byte flow-control window. This technique allows a small amount of data to expand into large memory allocations on the server, which are th...

CVE-2026-6673 Mattermost Jira plugin had unauthenticated {{/ac/installed}} lifecycle callback during pending Jira Cloud install

Mattermost versions 11.7.x = 11.7.0, 11.6.x = 11.6.2, 11.5.x = 11.5.5, 10.11.x = 10.11.17 fail to authenticate Atlassian Connect installed callbacks, allowing a remote unauthenticated attacker to inject a rogue sharedSecret and disrupt the Jira integration via POST to /ac/installed during the...

kernel: RDMA/iwcm: Fix workqueue list corruption by removing work_list

A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA Internet Wide Area RDMA Protocol iWARP subsystem. Incorrect work submission logic in the iwcm component can lead to multiple queueing of work items. This allows a work item to be processed and freed while still present in the...

CVE-2026-47262

containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service DoS condition. When creating a container from this image, memory exhaustion occurs, leading to an...

The vulnerability of the calipso_skbuff_setattr() function in the net/ipv6/calipso.c module of the Linux operating system’s IPv6 kernel implementation allows a malicious actor to trigger a service failure remotely.

The vulnerability of the calipsoskbuffsetattr function in the net/ipv6/calipso.c module of the Linux operating system’s IPv6 kernel implementation is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the fromSafeMacFilter() function (/goform/SafeMacFilter) in the Tenda F453 router software allows a perpetrator to execute arbitrary code or cause service failures.

The vulnerability of the fromSafeMacFilter function /goform/SafeMacFilter of the Tenda F453 router microprogramming system is caused by buffer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...

Vulnerability of the fromSafeUrlFilter() function (/goform/SafeUrlFilter) in the httpd daemon’s microprogramming router Tenda F453, allowing a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the fromSafeUrlFilter function /goform/SafeUrlFilter in the Tenda F453 router microprogramming software is caused by buffer overflow. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service failures remotely...

PT-2026-51471

Name of the Vulnerable Software and Affected Versions OpenSSH affected versions not specified Description A double free flaw exists in the Diffie-Hellman Group Exchange DH-GEX client path. This occurs during FIPS Federal Information Processing Standards mode known-group validation when the client...

Vulnerability of the formWrlsafeset() function (/goform/AdvSetWrlsafeset): This function in the httpd daemon’s microprogramming software for Tenda F453 allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the formWrlsafeset function /goform/AdvSetWrlsafeset in the httpd daemon’s microprogramming router Tenda F453 is related to the issue of operations going beyond the buffer boundaries in memory when processing the mitssidindex parameter. Exploiting this vulnerability could all...

Vulnerability of .NET, ASP.NET, and Microsoft Visual Studio software platforms, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of .NET, ASP.NET, and Microsoft Visual Studio programs is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

Incorrect Calculation of Buffer Size

Overview Affected versions of this package are vulnerable to Incorrect Calculation of Buffer Size in the XMLNode::parseFile function. An attacker can cause memory corruption, potentially leading to information disclosure or application disruption, by supplying specially crafted XML input...

Relative Path Traversal

Overview Affected versions of this package are vulnerable to Relative Path Traversal via the remote-import API. An attacker can manipulate files within the /var/snap/microceph confinement by sending crafted requests, potentially causing daemon disruption and polluting the cluster state. This is...

Relative Path Traversal

Overview Affected versions of this package are vulnerable to Relative Path Traversal via the remote-import API. An attacker can manipulate files within the /var/snap/microceph confinement by sending crafted requests, potentially causing daemon disruption and polluting the cluster state. This is...

GHSA-XG3J-C7Q4-F9PH Canonical MicroCeph: path traversal issue in the remote-import AP

Canonical MicroCeph versions from the squid and tentacle track are vulnerable to a path traversal issue in the remote-import API. Holders of a trusted cluster mTLS certificate such as enrolled cluster members or join token can manipulate files in an imported remote cluster within the...