CVE-2026-51218

A heap buffer overflow in the TS7Worker::PerformFunctionWrite function /core/s7server.cpp of snap7 v1.4.3 allows attackers to cause a Denial of Service DoS via a crafted packet...

PT-2026-53751

Name of the Vulnerable Software and Affected Versions snap7 version 1.4.3 Description A heap buffer overflow occurs in the TS7Worker::PerformFunctionWrite function located in /core/s7 server.cpp. This issue allows an attacker to trigger a Denial of Service DoS by sending a specially crafted packe...

CVE-2026-13509 RAGapp Knowledge File files.py FileHandler.remove_file path traversal

A vulnerability has been found in RAGapp up to 0.1.5. Affected is the function FileHandler.uploadfile/FileHandler.removefile of the file src/ragapp/backend/controllers/files.py of the component Knowledge File Handler. Such manipulation leads to path traversal. The attack can be executed remotely...

CVE-2026-13507

A vulnerability was detected in volcengine OpenViking up to 0.3.21. This affects the function strtouint64 of the file openviking/storage/vectordb/utils/strtouint64.py of the component Local VectorDB Primary-key Label Handler. The manipulation of the argument ID results in insufficient verificatio...

UBUNTU-CVE-2026-13500

A weakness has been identified in antlr ANTLR4 up to 4.13.2. Affected is an unknown function of the file tool/src/org/antlr/v4/codegen/model/OutputFile.java of the component Grammar Action Block Handler. Executing a manipulation can lead to code injection. The attack may be launched remotely. The...

CVE-2026-13498

The CVE concerns yashpokharna2555 restaurant-management-system. It identifies a vulnerability in an unknown function within /forgotpassword.php (POST Parameter Handler) where manipulating the email parameter leads to SQL injection. The issue can be exploited remotely and publicly available exploi...

SUSE-SU-2026:22291-1 Security update for alsa

This update for alsa fixes the following issue - CVE-2026-56109: double-free vulnerability in parsedef in src/conf.c that allows attackers to corrupt memory bsc1268853...

EUVD-2026-39983

A flaw has been found in arc53 DocsGPT up to 0.18.0. The affected element is the function encryptcredentials of the file application/security/encryption.py of the component Credential Storage. This manipulation causes insufficient verification of data authenticity. It is possible to initiate the...

SUSE CVE-2026-53322

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Clean up DMABUFs before disabling function On device shutdown, make vfiopcicoreclosedevice call vfiopcidmabufcleanup before the function is disabled via vfiopcicoredisable. This ensures that all access via DMABUFs is...

SUSE CVE-2026-53324

In the Linux kernel, the following vulnerability has been resolved: net: mana: Use pciname for debugfs directory naming Use pcinamepdev for the per-device debugfs directory instead of hardcoded "0" for PFs and pcislotnamepdev-slot for VFs. The previous approach had two issues: 1. pcislotname...

net/smc: fix sleep-inside-lock in __smc_setsockopt() causing local DoS

...

HAProxy - NULL Pointer Dereference in hpack_dht_insert Function

...

ALSA: PCM: Fix wait queue list corruption in snd_pcm_drain() on linked streams

...

drm/vc4: fix krealloc() memory leak

...

neigh: let neigh_xmit take skb ownership

...

MAL-2026-6544 Malicious code in chai-as-persisted (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5cf9c49450e0fa0d47be1b6ae27991f844868ff6c435d2082948b5feae862709 The package's postinstall script npm run smoke:pino executes index.js, which spawns a detached node lib/initializeCaller.js child. That module hides...

The vulnerability of the alps_disconnect() function in the drivers/input/mouse/alps.c module of the Linux kernel mouse driver allows a hacker to cause a service failure.

The vulnerability of the alpsdisconnect function in the drivers/input/mouse/alps.c module of the Linux kernel operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the verity_fec_decode() function in the drivers/md/dm-verity-fec.c file of the device driver for multiple Linux device types (RAID and LVM), allowing a hacker to cause a service failure.

The vulnerability of the verityfecdecode function in the drivers/md/dm-verity-fec.c file of the Linux device driver for multiple devices such as RAID and LVM is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the fib_tableFlush() function in the net/ipv4/fib_trie.c module of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the fibtableFlush function in the net/ipv4/fibtrie.c module of the Linux kernel allows an attacker to cause a service failure by failing to release resources after their useful life has ended. Exploiting this vulnerability can enable an attacker to trigger a service failure...

The vulnerability of the veth_poll() function in the drivers/net/veth.c module of the network device driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the vethpoll function in the drivers/net/veth.c file of the network device driver for Linux operating systems is due to a race condition. Exploiting this vulnerability could allow an attacker to cause a service failure...