32751 matches found
Exploit for Protection Mechanism Failure in Microsoft
CVE-2026-21510 - Windows Shell Security Feature Bypass Vulnera...
CVE-2026-21510
Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-21513
Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network...
CVE-2025-66630
A flaw was found in the Fiber web framework github.com/gofiber/fiber/v2. On Go versions prior to 1.24, the framework's Universally Unique Identifier UUID generation functions do not return an error when the underlying cryptographic randomness source fails. This can cause applications to use...
CVE-2026-25876
PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the backend/src/routes/results.routes.ts verify authentication but fails to enforce object-level authorization ownership checks. For example, this can be used to return all results for an assessment...
kernel: ext4: fix use-after-free in ext4_orphan_cleanup
A use-after-free vulnerability was found in the ext4 filesystem's orphan inode cleanup routine in the Linux kernel. When ext4inodeattachjinode fails with -ENOMEM during orphan cleanup at mount time, the error is not properly propagated. The inode is freed via iput, but the orphan list still...
SUSE CVE-2026-24682
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, audinserverrecvformats frees an incorrect number of audio formats on parse failure i + i, leading to out-of-bounds access in audioformatsfree. This vulnerability is fixed in 3.22.0...
ZLAN5143D 访问控制错误漏洞
ZLAN5143D is a serial port server from the Chinese company ZLAN. ZLAN5143D has an access control vulnerability, which stems from an inability to enforce authentication properly. This vulnerability allows attackers to directly access internal URLs...
The vulnerability of the Remote Access Connection Manager (RASMan) service on the Windows operating system allows a hacker to induce a service failure.
The vulnerability of the Remote Access Connection Manager RASMan service in the Windows operating system is related to pointer aliasing. Exploiting this vulnerability could allow an attacker to cause a service failure...
D-Link DIR-600 Command Injection Vulnerability
The D-Link DIR-600 is a wireless router from China's AUO D-Link. A command injection vulnerability exists in D-Link DIR-600 2.15WWb02 and earlier versions, which stems from the failure to properly filter constructed command special characters, commands, etc. in the parameter...
The vulnerability of the drain_obj_stock() function in the mm/memcontrol.c module of the Linux kernel’s memory management subsystem allows a hacker to cause a service failure.
The vulnerability of the drainobjstock function in the mm/memcontrol.c module of the Linux kernel’s memory management subsystem is related to the pointer dereferencing that occurs due to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cau...
The vulnerability of the irdma_net_event() function in the drivers/infiniband/hw/irdma/utils.c file of the Linux operating system’s kernel driver allows a hacker to cause a service failure.
The vulnerability of the irdmanetevent function in the drivers/infiniband/hw/irdma/utils.c file of the InfiniBand driver for the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
Vulnerability of functions rtw89_core_register_hw() and rtw89pci_probe() in the driver module net/wireless/realtek/rtw89/core.c of the Realtek wireless adapter driver for the Linux operating system. This vulnerability allows a hacker to cause a service failure.
The vulnerability of the functions rtw89coreregisterhw and rtw89pciprobe in the driver module net/wireless/realtek/rtw89/core.c of the Realtek wireless adapter driver in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can...
CVE-2025-29946
Technical details about CVE-2025-29946 (affected product/component/versions/root cause/patch) are not publicly provided in the supplied documents. Monitor for updates from vendors (AMD, OSV, Red Hat, Ubuntu, etc.) before assessing risk or remediation.
CVE-2026-21510
Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-21510
Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-21513
Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-1847 MongoDB Server may crash when inserting large documents
Inserting certain large documents into a replica set could lead to replica set secondaries not being able to fetch the oplog from the primary. This could stall replication inside the replica set leading to server crash...
