66552 matches found
The vulnerability of the vt8623fb_set_par() function in the drivers/video/fbdev/vt8623fb.c driver for kernel video devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the vt8623fbsetpar function in the drivers/video/fbdev/vt8623fb.c driver for kernel-based graphics buffer devices in the Linux operating system is related to the execution of operations beyond the buffer’s memory boundaries. Exploiting this vulnerability could allow a remote...
Apache Artemis 2.11.0 < 2.45.0 / 2.50.0 < 2.52.0 Missing Authentication (CVE-2026-27446)
The version of Apache Artemis formerly Apache ActiveMQ Artemis installed on the remote host is affected by a vulnerability: - Missing Authentication for Critical Function vulnerability. An unauthenticated remote attacker can use the Core protocol to force a target broker to establish an outbound...
SUSE: Security Advisory (SUSE-SU-2026:0800-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2026-23685
Rmedia SMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the gid parameter. Attackers can send GET requests to editgrp.php with malicious gid values using EXTRACTVALUE and CONCAT functions to retriev...
The vulnerability of the f2fs_do_zero_range() function in the fs/f2fs/file.c module of the F2FS file system support in Linux kernel allows a attacker to cause a service failure.
The vulnerability of the f2fsdozerorange function in the fs/f2fs/file.c module of the F2FS file system support in Linux kernel involves unconstrained and unrestricted resource allocation. Exploiting this vulnerability could allow a attacker to cause service failures...
Google Go 安全漏洞
Google Go is a static, strongly typed, compiled, concurrent programming language with garbage collection features from the American company Google. There is a security vulnerability in Google Go, which stems from the insufficient validation of host/authors during the url.Parse function. This allo...
Vulnerability of the lpfc_dmp_dbg() function in the drivers/scsi/lpfc/lpfc_init.c module – The SCSI device support driver in the Linux operating system allows a hacker to cause a service failure.
Vulnerability of the lpfcdmpdbg function in the drivers/scsi/lpfc/lpfcinit.c module – The Linux SCSI device support driver is vulnerable to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
Locutus 安全漏洞
Locutus is an open-source JavaScript library developed by Locutus. Versions of Locutus prior to 3.0.0 contained security vulnerabilities, which stemmed from insecure implementations of the calluserfuncarray function, potentially allowing remote code execution...
Medium: libpng
Issue Overview: libpng: An out-of-bounds read vulnerability exists in the pngsetquantize API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported by the user's display, certain palettes will cause the function to...
ROS-20260306-73-0027
A vulnerability in the patavia function of the Linux kernel is related to improper resource release. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...
ROS-20260306-73-0010
A vulnerability in the adxlput function of the Linux kernel is related to reading memory outside of the allocated buffer. Exploitation of the vulnerability could allow a remote attacker to affect the confidentiality of protected information...
The vulnerability of the nfsd_proc_write() function in the fs/nfsd/nfsproc.c module, which is part of the NFS network file system support in Linux kernel, allows a attacker to cause a service failure.
The vulnerability of the nfsdprocwrite function in the fs/nfsd/nfsproc.c module, which is part of the NFS network file system support in Linux kernels, is related to code errors. Exploiting this vulnerability could allow an attacker to cause service failures...
The vulnerability of the ntfsattr_find() function in the fs/ntfs/attrib.c file of the Linux kernel-based file system allows a attacker to cause a service failure.
The vulnerability of the ntfsattrfind function in the fs/ntfs/attrib.c file of the Linux kernel-based file system is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the isp116xremove() function of the drivers/usb/host/isp116x-hcd.c driver module allows a malicious actor to cause a service failure.
The vulnerability of the isp116xremove function in the drivers/usb/host/isp116x-hcd.c file of the Linux kernel’s USB device support driver is related to the lack of checking for the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2026-28452 OpenClaw < 2026.2.14 - Denial of Service via Unguarded Archive Extraction in extractArchive
OpenClaw versions prior to 2026.2.14 contain a denial of service vulnerability in the extractArchive function within src/infra/archive.ts that allows attackers to consume excessive CPU, memory, and disk resources through high-expansion ZIP and TAR archives. Remote attackers can trigger resource...
EUVD-2024-55468
Fonoster 0.5.5 before 0.6.1 allows ../ directory traversal to read arbitrary files via the /sounds/:file or /tts/:file VoiceServer endpoint. This occurs in serveFiles in mods/voice/src/utils.ts. NOTE: serveFiles exists in 0.5.5 but not in the next release, 0.6.1...
CVE-2026-21622 Password Reset Tokens Do Not Expire
Insufficient Session Expiration vulnerability in hexpm hexpm/hexpm 'Elixir.Hexpm.Accounts.PasswordReset' module allows Account Takeover. Password reset tokens generated via the "Reset your password" flow do not expire. When a user requests a password reset, Hex sends an email containing a reset...
CVE-2019-25503
PHPads 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the bannerID parameter in click.php3. Attackers can submit crafted bannerID values using SQL comment syntax and functions like extractvalue...
CVE-2026-28695
Craft is a content management system CMS. There is an authenticated admin RCE in Craft CMS 5.8.21 via Server-Side Template Injection using the create Twig function combined with a Symfony Process gadget chain. The create Twig function exposes Craft::createObject, which allows instantiation of...