Linux kernel Ethernet DoS

The vulnerability of the oatc6preparespitxbuffortxskbs function in the drivers/net/ethernet/oatc6.c module of the Linux kernel’s Ethernet network adapter support driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a...

ROS-20260324-73-0005

A vulnerability in the mm/vmalloc.c component of the Linux kernel is related to resource release errors. Exploitation of the vulnerability allows an attacker to cause a denial of service...

Linux Kernel IPMI DoS

The vulnerability of the ipmiipmbprobe function in the drivers/char/ipmi/ipmiipmb.c module of the Linux kernel’s device support driver relates to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux RISC-V Kernel Heap Buffer Overflow DoS

The vulnerability of the restorevstate function in the arch/riscv/kernel/signal.c module of the Linux operating system’s RISC-V architecture kernel subsystem is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-33688 AVideo has Pre-Captcha User Enumeration and Account Status Disclosure in Password Recovery Endpoint

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the password recovery endpoint at objects/userRecoverPass.php performs user existence and account status checks before validating the captcha. This allows an unauthenticated attacker to enumerate valid usernames a...

CVE-2026-33688

WWBN AVideo is an open source video platform. In versions up to and including 26.0, the password recovery endpoint at objects/userRecoverPass.php performs user existence and account status checks before validating the captcha. This allows an unauthenticated attacker to enumerate valid usernames a...

EUVD-2026-14400

A flaw was found in Keycloak. A remote attacker can exploit differential error messages during the identity-first login flow when Organizations are enabled. This vulnerability allows an attacker to determine the existence of users, leading to information disclosure through user enumeration...

CVE-2026-4633

A flaw was found in Keycloak. A remote attacker can exploit differential error messages during the identity-first login flow when Organizations are enabled. This vulnerability allows an attacker to determine the existence of users, leading to information disclosure through user enumeration...

EUVD-2026-14380

Versions of the package jsrsasign before 11.1.1 are vulnerable to Division by zero due to the RSASetPublic/KEYUTIL parsing path in ext/rsa.js and the BigInteger.modPowInt reduction logic in ext/jsbn.js. An attacker can force RSA public-key operations e.g., verify and encryption to collapse to...

max77620.c Heap Buffer Overflow DoS

The vulnerability of the max77620initialisefps function in the drivers/mfd/max77620.c file of the MFD controller driver for the Linux operating system is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260323-73-0027

A vulnerability in the tmptcp components of the Linux operating system kernel is related to state management errors. Exploitation of the vulnerability allows an attacker to gain access to sensitive data, compromise its integrity, and cause denial of service...

ROS-20260323-73-0012

A vulnerability in the pinctrl-msm component of the Linux kernel is related to resource release errors. Exploitation of the vulnerability allows an attacker to cause a denial of service...

ROS-20260323-73-0018

A vulnerability in the xusb component of the Linux operating system kernel is related to state management errors. Exploitation of the vulnerability allows an attacker to cause a denial of service...

PT-2026-125857

Уязвимость компонента XML веб-браузеров Google Chrome и Microsoft Edge связана с ошибками преобразования типов защищаемой информации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании с помощью специально созданной HTML-страницы...

amba-clcd Kernel DoS

The vulnerability of the clcdfbofinitdisplay function in the drivers/video/fbdev/amba-clcd.c driver for kernel-based graphics devices in the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260323-73-0026

A vulnerability in the mcast component of the Linux operating system kernel is related to resource release errors. Exploitation of the vulnerability allows an attacker to cause a denial of service...

ROS-20260323-73-0022

A vulnerability in the appletalk component of the Linux operating system kernel is related to errors in updating the reference counter. Exploitation of the vulnerability allows an attacker to compromise data integrity and cause a denial of service...

PT-2026-114629

Уязвимость компонента Animation веб-браузеров Google Chrome и Microsoft Edge связана с ошибками преобразования типов защищаемой информации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании с помощью специально созданной HTML-страницы...

CVE-2026-4547: Undefined Security Weakness

A security vulnerability has been detected in mickasmt next-saas-stripe-starter 1.0.0. Affected is the function generateUserStripe of the file actions/generate-user-stripe.ts of the component Checkout Handler. The manipulation of the argument priceId leads to business logic errors. The attack may...

PT-2026-27009

A security vulnerability has been detected in mickasmt next-saas-stripe-starter 1.0.0. Affected is the function generateUserStripe of the file actions/generate-user-stripe.ts of the component Checkout Handler. The manipulation of the argument priceId leads to business logic errors. The attack may...