CVE-2026-30653

An issue in Free5GC v.4.2.0 and before allows a remote attacker to cause a denial of service via the function HandleAuthenticationFailure of the component AMF...

PT-2026-27438

An issue in Free5GC v.4.2.0 and before allows a remote attacker to cause a denial of service via the function HandleAuthenticationFailure of the component AMF...

The vulnerability in the function mdio_bus_init() of the drivers/net/phy/mdio_bus.c file, a driver for supporting Physical Layer (PHY) devices in Linux operating systems, allows a hacker to cause a service failure.

The vulnerability of the mdiobusinit function in the drivers/net/phy/mdiobus.c module of the Linux physical-layer network support driver is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the dpll_device_unregister() function in the drivers/dpll/dpll_core.c module of the DPLL driver support library in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dplldeviceunregister function in the drivers/dpll/dpllcore.c module of the Linux DPLL driver framework is related to a error in re-allocating previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the cpt_register_algs() function in the drivers/crypto/marvell/octeontx2/otx2_cptvf_algs.c file of the Linux kernel cryptographic accelerator driver allows a hacker to cause a service failure.

The vulnerability of the cptregisteralgs function in the drivers/crypto/marvell/octeontx2/otx2cptvfalgs.c driver of the Linux kernel cryptographic accelerator is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...

CVE-2026-4614 itsourcecode sanitize or validate this input Parameter subjects.php sql injection

A vulnerability was determined in itsourcecode sanitize or validate this input 1.0. This issue affects some unknown processing of the file /admin/subjects.php of the component Parameter Handler. This manipulation of the argument subjectcode causes sql injection. The attack is possible to be carri...

JLSEC-2026-5 nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C

nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API nghttp2sessionterminatesession or nghttp2sessionterminatesession2 is called by the application. They might be...

EUVD-2026-14461

A command injection vulnerability exists in DigitalOcean Droplet Agent through 1.3.2. The troubleshooting actioner component internal/troubleshooting/actioner/actioner.go processes metadata from the metadata service endpoint and executes commands specified in the TroubleshootingAgent.Requesting...

gimp: GIMP: Remote Code Execution via out-of-bounds write in XWD file parsing

A flaw was found in GIMP. The specific flaw exists within the parsing of XWD files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the conte...

ALPINE-CVE-2026-23555

Any guest issuing a Xenstore command accessing a node using the illegal node path "/local/domain/", will crash xenstored due to a clobbered error indicator in xenstored when verifying the node path. Note that the crash is forced via a failing assert statement in xenstored. In case xenstored is...

UBUNTU-CVE-2026-23555

Any guest issuing a Xenstore command accessing a node using the illegal node path "/local/domain/", will crash xenstored due to a clobbered error indicator in xenstored when verifying the node path. Note that the crash is forced via a failing assert statement in xenstored. In case xenstored is...

CVE-2026-23555

Any guest issuing a Xenstore command accessing a node using the illegal node path "/local/domain/", will crash xenstored due to a clobbered error indicator in xenstored when verifying the node path. Note that the crash is forced via a failing assert statement in xenstored. In case xenstored is...

CVE-2026-23555 Xenstored DoS by unprivileged domain

Any guest issuing a Xenstore command accessing a node using the illegal node path "/local/domain/", will crash xenstored due to a clobbered error indicator in xenstored when verifying the node path. Note that the crash is forced via a failing assert statement in xenstored. In case xenstored is...

CVE-2025-10679

The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More WordPress plugin (up to v2.2.12) is vulnerable due to insufficient input validation in the bulkTenReviews function, allowing user-controlled data to be passed to a variable function call ...

golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS

A flaw in golang.org/x/crypto/ssh/agent causes the SSH agent client to panic when a peer responds with the generic SSHAGENTSUCCESS 0x06 message to requests expecting typed replies e.g., List, Sign. The unmarshal layer produces an unexpected message type, which the client code does not handle,...

Siemens SIMATIC S7-1500 Improper Input Validation (CVE-2025-38400)

In the Linux kernel, the following vulnerability has been resolved: nfs: Clean up /proc/net/rpc/nfs when nfsfsprocnetinit fails. syzbot reported a warning below 1 following a fault injection in nfsfsprocnetinit. 0 When nfsfsprocnetinit fails, /proc/net/rpc/nfs is not removed. Later, rpcprocexit...

Siemens SIMATIC S7-1500 NULL Pointer Dereference(CVE-2025-38214)

In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fbsetvar to prevent null-ptr-deref in fbvideomodetovar If fbaddvideomode in fbsetvar fails to allocate memory for fbvideomode, later it may lead to a null-ptr dereference in fbvideomodetovar, as the fbinfo is registere...

The vulnerability of the max77620_initialise_fps() function in the drivers/mfd/max77620.c module of the controller multifunctional devices (MFD) driver for the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the max77620initialisefps function in the drivers/mfd/max77620.c file of the MFD controller driver for the Linux operating system is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the nft_set_elem_expr_clone() function in the net/netfilter/nf_tables_api.c module of the netfilter kernel of the Linux operating system allows a attacker to trigger a service failure.

The vulnerability of the nftsetelemexprclone function in the net/netfilter/nftablesapi.c module of the netfilter component of the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the cifs_readahead() function in the fs/cifs/file.c module of the Linux kernel file system allows a hacker to cause a service failure.

The vulnerability of the cifsreadahead function in the fs/cifs/file.c module of the Linux kernel file system is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...