CVE-2026-43149

In the Linux kernel, the following vulnerability has been resolved: net: wan/fslucchdlc: Fix dmafreecoherent in uhdlcmemclean The priv-rxbuffer and priv-txbuffer are alloc'd together as contiguous buffers in uhdlcinit but freed as two buffers in uhdlcmemclean. Change the cleanup to only call...

PT-2026-2132

Name of the Vulnerable Software and Affected Versions CryptoLib versions prior to 1.4.3 Description CryptoLib is a software-only solution utilizing the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight Syste...

kernel: Bluetooth: L2CAP: Fix use-after-free

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix use-after-free Fix potential use-after-free in l2caplecommandrej...

EUVD-2012-2242

Malware in sbrugna...

CVE-2024-43369

CVE-2024-43369 affects Ibexa (ezplatform) RichText Field Type prior to 4.6.10. The validator blocked javascript: and vbscript: in links but could be bypassed with uppercase/case variants, enabling persistent XSS for users with content-editing permissions (typically Editor+). The issue is mitigate...

Cisco NX-OS Software Link Layer Discovery Protocol DoS (cisco-sa-nxos-lldp-dos-z7PncTgt)

According to its self-reported version, Cisco NX-OS System Software is affected by a denial of service DoS vulnerability. The vulnerability lies in the Link Layer Discovery Protocol LLDP feature of Cisco NX-OS Software and could allow an unauthenticated, adjacent attacker to cause a denial of...

PT-2020-22811

Name of the Vulnerable Software and Affected Versions tor versions prior to 0.3.5.12 Description The issue concerns the Tor link protocol, where channels using obsolete versions were allowed to circumvent address-canonicity checks. This has been fixed by updating the tor package to version...

Micro Air Vehicle Link Path Traversal Vulnerability

Micro Air Vehicle Link MAVLink is a lightweight messaging protocol from the Dronecode project that is primarily used for communication between ground control terminals ground stations and UAVs as well as between airborne UAV components. A security vulnerability exists in the Micro Air Vehicle Lin...

Remarkable Cross-Site Scripting Vulnerability

markdown is a Markdown parser. A cross-site scripting vulnerability exists in versions prior to remarkable 1.4.1, which stems from the program failing to properly whitelist link protocols. A remote attacker can exploit this vulnerability to inject content...

PT-2018-4154

Name of the Vulnerable Software and Affected Versions remarkable versions 1.4.0 and earlier Description The issue allows certain input to bypass the bad protocol check, enabling javascript: URLs to be injected into the rendered content. This occurs due to improper whitelisting of link protocols i...

DEBIAN-CVE-2012-2249

Tor before 0.2.3.23-rc allows remote attackers to cause a denial of service assertion failure and daemon exit via a renegotiation attempt that occurs after the initiation of the V3 link protocol...

CVE-2012-2250

Tor before 0.2.3.24-rc allows remote attackers to cause a denial of service assertion failure and daemon exit by performing link protocol negotiation incorrectly...

CVE-2012-2249

Tor before 0.2.3.23-rc allows remote attackers to cause a denial of service assertion failure and daemon exit via a renegotiation attempt that occurs after the initiation of the V3 link protocol...

DEBIAN-CVE-2012-2250

Tor before 0.2.3.24-rc allows remote attackers to cause a denial of service assertion failure and daemon exit by performing link protocol negotiation incorrectly...

Information disclosure

Tor before 0.2.3.23-rc allows remote attackers to cause a denial of service assertion failure and daemon exit via a renegotiation attempt that occurs after the initiation of the V3 link protocol...

Design/Logic Flaw

Tor before 0.2.3.24-rc allows remote attackers to cause a denial of service assertion failure and daemon exit by performing link protocol negotiation incorrectly...

CVE-2012-2250

Tor before 0.2.3.24-rc allows remote attackers to cause a denial of service assertion failure and daemon exit by performing link protocol negotiation incorrectly...

CVE-2012-2249

Tor before 0.2.3.23-rc allows remote attackers to cause a denial of service assertion failure and daemon exit via a renegotiation attempt that occurs after the initiation of the V3 link protocol...

CVE-2012-2250

Tor before 0.2.3.24-rc allows remote attackers to cause a denial of service assertion failure and daemon exit by performing link protocol negotiation incorrectly...

CVE-2012-2250

Tor before 0.2.3.24-rc allows remote attackers to cause a denial of service assertion failure and daemon exit by performing link protocol negotiation incorrectly...