CVE-2026-10675

In Zephyr's Bluetooth Mesh PB-ADV provisioning bearer subsys/bluetooth/mesh/pbadv.c, provmsgrecv rescheduled the provisioning protocol watchdog timer unconditionally at the top of the function, before the FCS check and before the ADVLINKINVALID check. Once a provisioning attempt fails, provfailed...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a peer lookup failure in monitor mode that could result in an invalid link ID...

EUVD-2025-13559

Malicious code in bioql PyPI...

CVE-2025-3649

The LightPress Lightbox WordPress plugin before 2.3.4 does not check download links point to valid, non-Javascript URLs, allowing users with at least the contributor role to conduct Stored XSS attacks...

CVE-2024-45563

Memory corruption while handling schedule request in Camera Request ManagerCRM due to invalid link count in the corresponding session...

CVE-2024-45563

Memory corruption while handling schedule request in Camera Request ManagerCRM due to invalid link count in the corresponding session...

CVE-2024-45563

CVE-2024-45563 describes a memory corruption issue in the Camera Request Manager (CRM) on Qualcomm chipsets caused by an invalid session link count when processing a schedule request. Affected component is the CRM within Qualcomm devices; the root cause is improper handling of session links leadi...

CVE-2024-45563 Out-of-bounds Write in Camera Driver

Memory corruption while handling schedule request in Camera Request ManagerCRM due to invalid link count in the corresponding session...

PT-2025-19844 · Qualcomm · Snapdragon +14

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to memory corruption that occurs while handling a schedule request in the Camera Request Manager CRM due to an invalid link count in the corresponding session. This...

SUSE CVE-2011-3326

The ospfflood function in ospfflood.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service daemon crash via an invalid Link State Advertisement LSA type in an IPv4 Link State Update message...

Nextcloud Server and ownCloud Server Content Spoofing Vulnerabilities

ownCloud is a free and open source personal cloud storage solution from German company ownCloud. nextcloud is an open source self-hosted file synchronization and sharing communication application platform. ownCloud Server and Nextcloud Server are both a server version of one of them. A security...

Nextcloud Server and ownCloud Server Security Bypass Vulnerability (CNVD-2017-05313)

ownCloud is a free and open source personal cloud storage solution from German company ownCloud. nextcloud is an open source self-hosted file synchronization and sharing communication application platform. ownCloud Server and Nextcloud Server are both a server version of one of them. A security...

Server: Content-Spoofing in "files" app

The location bar in the files app was not verifying the passed parameters. An attacker could craft an invalid link to a fake directory structure and use this to display an attacker-controlled error message to the user. For more information please consult the official advisory. This advisory is...

Content-Spoofing in "files" app (NC-SA-2016-010)

The location bar in the files app was not verifying the passed parameters. An attacker could craft an invalid link to a fake directory structure and use this to display an attacker-controlled error message to the user...

Server: Content-Spoofing in files app

The location bar in the files app was not verifying the passed parameters. An attacker could craft an invalid link to a fake directory structure and use this to display an attacker-controlled error message to the user. For more information please consult the official advisory. This advisory is...

JavaScript might run in the wrong context if loaded from error page – Opera Security Advisories

JavaScript might run in the wrong context if loaded from error page – Opera Security Advisories OPCOM Team | October 11, 2010 Severity Moderate Description If Opera is sent to an invalid URL, an error page will be displayed along with a link to the URL. The URL linked to might run scripts, and in...