PT-2026-81358

Name of the Vulnerable Software and Affected Versions Nokogiri versions prior to 1.19.4 Description An invalid out-of-bounds memory read exists in the protected internal Nodeinitialize copy with args helper, which is utilized by Nodedup and clone. The issue occurs because the helper unwraps its...

PT-2026-81310

A security vulnerability has been detected in macrozheng mall up to 1.0.3. Affected is the function OmsCartItemServiceImpl.updateQuantity of the file /cart/update/quantity. The manipulation of the argument quantity leads to business logic errors. The attack may be initiated remotely. The vendor...

CVE-2026-65927: Off-by-one Error

Off-by-one Error vulnerability in Apache Tomcat impacting the N flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.0.M1 through...

PT-2026-109464

Уязвимость сервера приложений Apache Tomcat связана с ошибкой единичного смещения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

mac80211 Stack Use-After-Free

The vulnerability of the function ieee80211parseadvt2l in the net/mac80211/mlme.c module of the mac80211 stack in the Linux operating system is related to incorrect assumptions regarding the organization of data or memory. Exploiting this vulnerability could allow a remote attacker to compromise...

Btrfs Kernel Heap Buffer Overflow DoS

The vulnerability of the logconflictinodes function in the fs/btrfs/tree-log.c file of the Btrfs file system in the Linux operating system is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux DMA Driver DoS

The vulnerability in the xdmaprobe function within drivers/dma/xilinx/xdma.c of the Linux kernel DMA driver is related to improper handling of error conditions. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Wireshark ESS DoS

The vulnerability of the ESS protocol analyzer used by Wireshark for analyzing computer network traffic is related to errors during initialization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Linux Kernel DoS

The vulnerability in the bcm2835asbcontrol function within the drivers/pmdomain/bcm/bcm2835-power.c file of the Linux kernel operating system is related to synchronization errors. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux Block Buffer Overflow DoS

The vulnerability of the blkallocextminor function in the block/genhd.c module, which supports the block-level kernel in the Linux operating system, is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux USB Device Driver Heap Buffer Overflow DoS

The vulnerability of the gadgetunbinddriver function in the drivers/usb/gadget/udc/core.c file of the Linux USB device driver module is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux NCI Core Heap Buffer Overflow DoS

The vulnerability in the nciclosedevice function within net/nfc/nci/core.c, which supports the implementation of the NFC NCI core in the Linux operating system, is related to synchronization errors occurring when a shared resource is utilized. Exploitation of this vulnerability may enable an...

Linux kernel DoS

The vulnerability in the setuplass function within the arch/x86/kernel/cpu/common.c module, which is part of the Linux kernel for x86 platforms, is related to system configuration errors or misconfigurations. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux kernel Ethernet adapter DoS

The vulnerability of the bcmamdiomiiregister function in the drivers/net/ethernet/broadcom/bgmac-bcma-mdio.c driver for supporting Ethernet network adapters in the Linux operating system is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause a...

Linux kernel CAN Network Device Driver Heap Buffer Overflow DoS

The vulnerability of the gsusbreceivebulkcallback function in the drivers/net/can/usb/gsusb.c file of the Linux network device driver suite is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Bluetooth btintel_hw_error Heap Buffer Overflow

The vulnerability in the btintelhwerror function within drivers/bluetooth/btintel.c of the Linux kernel Bluetooth device driver is related to synchronization errors. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and availability of protecte...

Linux Kernel DoS

The vulnerability in the sevessyncvmsa function within the arch/x86/kvm/svm/sev.c subsystem of the virtualization sub-system on x86-based Linux kernel systems is related to synchronization errors. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Mellanox Ethernet driver Network Information Disclosure

The vulnerability of the functions removeunreadyflow and mlx5etcdelfdbflow in the driver/net/ethernet/mellanox/mlx5/core/entc.c file of the Mellanox Ethernet network adapter driver for the Linux operating system is related to synchronization errors when using shared resources. Exploiting this...

qla2xxx SCSI Driver Heap Buffer Overflow DoS

The vulnerability of the qltfreesessiondone function in the drivers/scsi/qla2xxx/qlatarget.c driver for Linux SCSI device drivers is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected...

Marvell wireless adapter Heap Buffer Overflow DoS

The vulnerability in the lbsfreeadapter function within the drivers/net/wireless/marvell/libertas/main.c file of the Marvell wireless adapter driver is related to synchronization errors. Exploitation of this vulnerability may allow a remote attacker to compromise the confidentiality, integrity, a...