The vulnerability in the function brcmf_netdev_start_xmit() of the drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c driver for Broadcom wireless adapter drivers in the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the brcmfnetdevstartxmit function in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/core.c file of the Broadcom wireless adapter driver in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the igc_rd32() function in the drivers/net/ethernet/intel/igc/igc_main.c file of the Linux kernel’s Ethernet adapter support driver allows a hacker to cause a system failure.

The vulnerability of the igcrd32 function in the drivers/net/ethernet/intel/igc/igcmain.c file of the Linux kernel’s Ethernet adapter support driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerabilities in the drivers/net/ethernet/google/gve/gve_ethtool.c and drivers/net/ethernet/google/gve/gve_main.c modules of the Linux operating system allow a hacker to cause a service failure.

The vulnerability in the drivers/net/ethernet/google/gve/gveethtool.c and drivers/net/ethernet/google/gve/gvemain.c modules of the Linux operating system is related to incorrect calculation of buffer sizes. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the __reg_bound_offset() function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for the Linux operating system’s kernel, allows a hacker to trigger a service failure.

The vulnerability of the regboundoffset function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for Linux’s operating system, relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to...

CVE-2026-33161 Craft CMS: Anonymous "assets/image-editor" calls returns private asset editor metadata to unauthorized users

Craft CMS is a content management system CMS. From version 4.0.0-RC1 to before version 4.17.8 and from version 5.0.0-RC1 to before version 5.9.14, a low-privileged authenticated user can call assets/image-editor with the ID of a private asset they cannot view and still receive editor response dat...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via the HandleAuthenticationFailure function of the AMF component. An attacker can cause the service to become unavailable by sending specially crafted requests remotely. Details Denial of Service DoS describes a...

EUVD-2026-14889

An issue in Free5GC v.4.2.0 and before allows a remote attacker to cause a denial of service via the function HandleAuthenticationFailure of the component AMF...

CVE-2026-30653

An issue in Free5GC v.4.2.0 and before allows a remote attacker to cause a denial of service via the function HandleAuthenticationFailure of the component AMF...

OPENSUSE-SU-2026:20413-1 Security update for nghttp2

This update for nghttp2 fixes the following issue: - CVE-2026-27135: assertion failure due to missing state validation can lead to DoS bsc1259845...

CVE-2026-4001

The Woocommerce Custom Product Addons Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 5.4.1 via the custom pricing formula eval in the processcustomformula function within includes/process/price.php. This is due to insufficient sanitization an...

CVE-2026-30653

An issue in Free5GC v.4.2.0 and before allows a remote attacker to cause a denial of service via the function HandleAuthenticationFailure of the component AMF...

The vulnerability of the xchk_scrub_create_subord() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the xchkscrubcreatesubord function in the Linux operating system is related to incorrect checking of the returned value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `sysfb_create_simplefb()` function in the `drivers/firmware/sysfb_simplefb.c` driver file of the Linux kernel’s firmware support module allows a attacker to cause a service failure.

The vulnerability of the sysfbcreatesimplefb function in the drivers/firmware/sysfbsimplefb.c driver for Linux kernel-based operating systems is related to incorrect handling of usage counters. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the __sync_icache_dcache() function in the arch/arm/mm/flush.c module, which is part of the ARM kernel support in the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the syncicachedcache function in the arch/arm/mm/flush.c module, which is part of the ARM kernel support in the Linux operating system, is related to changes in behavior under new versions or different environments. Exploiting this vulnerability could allow an attacker to cau...

The vulnerability of the skb_frag_ref() function in the include/linux/skbuff.h module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the skbfragref function in the include/linux/skbuff.h header of the Linux kernel is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the rxrpc_propose_ACK() function in the net/rxrpc/ar-internal.h module, which supports RxRPC session sockets in Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the rxrpcproposeACK function in the net/rxrpc/ar-internal.h module, which supports RxRPC session sockets in Linux kernel, is related to a race condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the check_slab() function in the mm/slub.c module of the Linux kernel’s memory management subsystem allows a hacker to cause a service failure.

The vulnerability of the checkslab function in the mm/slub.c module of the Linux kernel’s memory management subsystem is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-29840

JiZhiCMS v2.5.6 and before contains a Stored Cross-Site Scripting XSS vulnerability in the release function within app/home/c/UserController.php. The application attempts to sanitize input by filtering tags but fails to recursively remove dangerous event handlers in other HTML tags such as onerro...

The vulnerability of the clcdfb_of_vram_setup() function in the drivers/video/fbdev/amba-clcd.c driver module allows a hacker to cause a system failure.

The vulnerability of the clcdfbofvramsetup function in the drivers/video/fbdev/amba-clcd.c driver for supporting Linux kernel video buffer devices is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the seg6_hmac_init() function in the net/ipv6/seg6_hmac.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the seg6hmacinit function in the net/ipv6/seg6hmac.c module of the Linux kernel is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...