6364 matches found
CVE-2026-32776: NULL Pointer Dereference
libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content...
OESA-2026-1541 ceph security update
Ceph is a massively scalable, open-source, distributed storage system that runs on commodity hardware and delivers object, block and file system storage. Security Fixes: Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument...
OESA-2026-1542 ceph security update
Ceph is a massively scalable, open-source, distributed storage system that runs on commodity hardware and delivers object, block and file system storage. Security Fixes: Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument...
MINI-W272-CM63-G552
Bulletin has no description...
MINI-CWM6-PHCM-5Q64
Bulletin has no description...
MINI-H99X-G368-MW5C
Bulletin has no description...
BIT-ARGO-WORKFLOWS-2026-28229 Argo Workflows has unauthorized access to Argo Workflows Template
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior to 4.0.2 and 3.7.11, Workflow templates endpoints allow any client to retrieve WorkflowTemplates and ClusterWorkflowTemplates. Any request with a Authorization: Bearer nothing...
EUVD-2026-11724
Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings...
GHSA-J478-P7VQ-3347 Ella Core: AMF DoS via malformed PathSwitchRequest with empty NR security capability bitstrings
Summary Ella Core panics when processing a PathSwitchRequest containing UE Security Capabilities with zero-length NR encryption or integrity protection algorithm bitstrings, resulting in a denial of service. Impact An attacker able to send crafted NGAP messages to Ella Core can crash the process,...
kora-lib: Unrecognized Instruction Types Create Empty Stubs That Bypass Fee Payer Policy
Summary When inner CPI instructions use instruction types not recognized by Kora's parser including Token-2022 extension instructions like ConfidentialTransfer, TransferFeeExtension::WithdrawWithheldTokens, etc., they are reconstructed as stub instructions with empty accounts and empty data. Thes...
GHSA-X442-M7CC-HR92 kora-lib: Unrecognized Instruction Types Create Empty Stubs That Bypass Fee Payer Policy
Summary When inner CPI instructions use instruction types not recognized by Kora's parser including Token-2022 extension instructions like ConfidentialTransfer, TransferFeeExtension::WithdrawWithheldTokens, etc., they are reconstructed as stub instructions with empty accounts and empty data. Thes...
PT-2026-29237
Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.3.8 Description The software contains a sender allowlist bypass issue in its Microsoft Teams plugin. This allows unauthorized senders to circumvent authorization checks. Specifically, when a team/channel route...
EUVD-2026-10824
Feathers has an OAuth Callback Account Takeover issue...
MINI-V38H-QCW4-8JCR
Bulletin has no description...
MINI-FF9C-98V3-53VP
Bulletin has no description...
MINI-77GX-833P-8HMG
Bulletin has no description...
CVE-2025-41760
An administrator may attempt to block all traffic by configuring a pass filter with an empty table. However, in UBR, an empty list does not enforce any restrictions and allows all network traffic to pass unfiltered...
BIT-GOLANG-2026-27138 Panic in name constraint checking for malformed certificates in crypto/x509
Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints. This can crash programs that are either directly verifying X.509 certificate chains, or those that use TLS...
PT-2026-24606
Certificate verification can panic when a certificate in the chain has an empty DNS name and another certificate in the chain has excluded name constraints. This can crash programs that are either directly verifying X.509 certificate chains, or those that use TLS...