The vulnerabilities of the functions hisi_acc_vfiopci_open_device() and hisi_acc_vfiopci_close_device() in the drivers/vfio/pci/hisilicon/hisi_acc_vfiopci.c driver for VFIO device controllers in the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the functions hisiaccvfiopciopendevice and hisiaccvfiopciclosedevice in the drivers/vfio/pci/hisilicon/hisiaccvfiopci.c driver for VFIO devices in the Linux operating system is related to improper initialization. Exploiting this vulnerability could allow an attacker to...

PT-2026-24164

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server for ABAP affected versions not specified Description An authenticated attacker with user privileges may be able to read Database Analyzer Log Files due to a missing authorization check within a specific RFC...

PT-2026-24208

Name of the Vulnerable Software and Affected Versions TUBITAK BILGEM Software Technologies Research Institute Liderahenk versions prior to 3.4.0 Description A missing authentication check for a critical function in Liderahenk allows for remote code inclusion, privilege abuse, and command injectio...

PT-2026-24165

Name of the Vulnerable Software and Affected Versions SAP Supply Chain Management affected versions not specified Description An authenticated attacker with regular user privileges and network access can cause a denial-of-service condition by repeatedly invoking a remote-enabled function module...

WordPress plugin MetForm Pro 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

iccDEV 缓冲区错误漏洞

iccDEV is an open-source color configuration code library developed by the International Color Consortium. Versions of iccDEV prior to 2.3.1.5 contained a buffer error vulnerability. This vulnerability stems from the CIccTagNum::GetValues function, which has a stack buffer overflow issue,...

PT-2026-24358

Name of the Vulnerable Software and Affected Versions iccDEV versions prior to 2.3.1.5 Description iccDEV is a set of libraries and tools for working with ICC color management profiles. Versions prior to 2.3.1.5 contain a segmentation fault due to an invalid pointer read within the...

PT-2026-24268

Уязвимость программного обеспечения Azure IoT Explorer связана с передачей критичной информации открытым текстом. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, раскрыть защищаемую информацию...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability. This vulnerability stems from the lack of boundary checks in the DeviceId function within DeviceId.java, which results in persistent data synchronization issues. This may lead to an increase in...

iccDEV 缓冲区错误漏洞

iccDEV is an open-source color configuration code library developed by the International Color Consortium. Versions of iccDEV prior to 2.3.1.5 contained a buffer error vulnerability. This vulnerability stemmed from an overflow in the stack buffer of the icFixXml function, which could lead to stac...

Parse Server 安全漏洞

Parse Server is an open-source backend developed by the Parse Platform. It can be deployed on any infrastructure that supports Node.js. There were security vulnerabilities in versions of Parse Server prior to 8.6.13 and 9.5.1-alpha.2. These vulnerabilities stemmed from using prototype property...

iccDEV 代码问题漏洞

iccDEV is an open-source color configuration code library developed by the International Color Consortium. Versions of iccDEV prior to 2.3.1.5 contained code-related vulnerabilities. These vulnerabilities stemmed from a heap buffer overflow during the execution of the CIccMatrixMath::SetRange...

SAP Supply Chain Management 安全漏洞

SAP Supply Chain Management is a supply chain management software developed by the German company SAP. There is a security vulnerability in SAP Supply Chain Management, which stems from uncontrolled resource consumption. This vulnerability could allow authenticated attackers to trigger a...

The vulnerability of the bpf_crypto_crypt() function in the kernel/bpf/crypto.c module, which is part of the BPF interpreter support for the Linux operating system, allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the bpfcryptocrypt function in the kernel/bpf/crypto.c module, which is part of the Linux operating system’s BPF interpreter support, relates to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise t...

The vulnerability of the `tcp_ao_finish_connect()` function in the `net/ipv4/tcp_ao.c` module of the Linux operating system’s IPv4 protocol implementation allows a attacker to cause a service failure.

The vulnerability of the tcpaofinishconnect function in the net/ipv4/tcpao.c module of the Linux operating system’s IPv4 protocol implementation is related to the pointer dereferencing. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the recv_done() function in the fs/smb/server/transport_rdma.c module of the SMB server support in the Linux operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the recvdone function in the fs/smb/server/transportrdma.c module of the SMB server support in the Linux operating system is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain unauthorized...

The vulnerability of the flexcoppciremove() function in the drivers/media/pci/b2c2/flexcop-pci.c driver for multimedia devices on the PCI bus of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the flexcoppciremove function in the drivers/media/pci/b2c2/flexcop-pci.c driver for multimedia devices on the PCI bus of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the csdlockdebug() function in the kernel/smp.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the csdlockdebug function in the kernel/smp.c module of the Linux operating system is related to improper initialization. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Microsoft Windows Ancillary Function Driver for WinSock 安全漏洞

The Microsoft Windows Ancillary Function Driver for WinSock is a supplementary function driver for Winsock developed by Microsoft Corporation. There are security vulnerabilities associated with the Microsoft Windows Ancillary Function Driver for WinSock. Attackers can exploit these vulnerabilitie...

iccDEV 安全漏洞

iccDEV is an open-source color configuration code library developed by the International Color Consortium. Versions of iccDEV prior to 2.3.1.5 contained security vulnerabilities. These vulnerabilities stemmed from the use of the CIccCmm::AddXform function, where the heap was reused after...