The vulnerability of software for storing images with a wide dynamic range of brightness, related to errors during initialization of variables, allows a hacker to cause a service failure.

The vulnerability of software for storing images with a wide dynamic range of brightness in the OpenEXR format is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerabilities of the functions nvmetpci_epf_queue_response() and nvmetpci_epf_exec_iod_work() in the driver/nvme/target/pci-epf.c module of the Linux operating system’s NVME kernel allow a attacker to cause a service failure.

The vulnerabilities of the functions nvmetpciepfqueueresponse and nvmetpciepfexeciodwork in the drivers/nvme/target/pci-epf.c module of the NVME kernel of the Linux operating system are related to state management errors. Exploiting these vulnerabilities can allow an attacker to cause service...

EulerOS 2.0 SP11 : golang (EulerOS-SA-2026-1578)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Parsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion.CVE-2025-58185 When Conn.Handshake fai...

EulerOS 2.0 SP12 : golang (EulerOS-SA-2026-1363)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a respon...

EulerOS 2.0 SP12 : golang (EulerOS-SA-2026-1394)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a respon...

The vulnerability of the ucsi_init() function in the drivers/usb/typec/ucsi/ucsi.c file of the UCSI interface driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the ucsiinit function in the drivers/usb/typec/ucsi/ucsi.c file of the UCSI interface driver for the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gimp (UTSA-2026-006179)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006179 advisory. A flaw was found in GIMP when processing certain TGA image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can b...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: gimp (UTSA-2026-006174)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006174 advisory. A flaw was found in GIMP when processing XCF image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricke...

PT-2026-34588

Уязвимость функции IndexNodes::get модуля btr.cpp системы управления базами данных «Ред База Данных» связана с ошибками синхронизации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: redis6 (UTSA-2026-006177)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006177 advisory. Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation...

Improper File Handling

zx is vulnerable to Improper File Handling. The vulnerability is due to a logic error in the linkNodeModules and cleanup routines when using the --prefer-local option, which allows unintended deletion of an external /nodemodules directory outside the current working directory...

ROS-20260313-73-0005

A vulnerability in the pnfsupdatelayout function of the Linux operating system kernel is related to synchronization errors when using a shared resource. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260313-73-0041

A vulnerability in the l2capsockresumecb function of the Bluetooth component of the Linux operating system kernel is related to post-release usage errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

The vulnerability of the Windows Device Association Service in Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the Windows Device Association Service in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of the Microsoft Authenticator multi-factor authentication application lies in authentication errors in the handler for the customizable URL scheme. This allows attackers to disclose sensitive information that is protected by this authentication mechanism.

The vulnerability of the Microsoft Authenticator multi-factor authentication application is related to authentication errors in the handler for the customizable URL scheme. Exploiting this vulnerability can allow a perpetrator to disclose sensitive information...

ROS-20260313-73-0024

A vulnerability in the bitmapgetstats function of the Linux operating system kernel is related to state management errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

The vulnerability of the Windows Graphics Component, which allows attackers to exploit their privileges.

The vulnerability of the Windows Graphics Component in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Windows Device Association Service on Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Windows Device Association Service in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability of Windows Admin Center’s server management tool, related to access control errors, allows attackers to escalate their privileges.

The vulnerability of the Windows Admin Center management tool is related to access control errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the extension for Microsoft Entra ID (formerly Azure Active Directory). The Microsoft Azure AD SSH login extension, which is associated with initialization errors, allows a perpetrator to escalate their privileges.

The vulnerability of the Microsoft Entra ID formerly Azure Active Directory Microsoft Azure AD SSH login extension is related to initialization errors. Exploiting this vulnerability can allow attackers to increase their privileges...