Linux IPv6 Protocol Cleanup Prefix Route Buffer Overflow DoS

The vulnerability of the cleanupprefixroute function in the net/ipv6/addrconf.c module of the IPv6 protocol implementation in the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

Direct Rendering Infrastructure AMD RCE

The vulnerability of the rascoreisEnabled function in the drivers/gpu/drm/amd/ras/rascore/rascore.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow a remote...

XMLDOM XSS

The vulnerability of the Element.setAttribute method in the XML document access and manipulation module XMLDOM is related to errors in processing XML requests. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

Linux kernel PHY subsystem Heap Buffer Overflow DoS

The vulnerability of the qusb2phyprobe function in the drivers/phy/qualcomm/phy-qcom-qusb2.c file of the Linux kernel’s PHY driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux kernel cryptographic accelerator driver Heap Buffer Overflow DoS

The vulnerability of the eip93hmacsetkey function in the drivers/crypto/inside-secure/eip93/eip93-common.c file of the Linux kernel cryptographic accelerator driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux Kernel xdp_master_redirect Heap Buffer Overflow DoS

The vulnerability of the xdpmasterredirect function in the net/core/filter.c module, which supports networking functions in Linux kernels, is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Linux net/sched/cls_fw fw_classify Heap Buffer Overflow DoS

The vulnerability of the fwclassify function in the net/sched/clsfw.c file of the network scheduling subsystem in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel mailbox driver Heap Buffer Overflow DoS

The vulnerability of the mboxcontrollerregister function in the drivers/mailbox/mailbox.c file of the Linux kernel-based mailbox driver module is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Direct Rendering Infrastructure AMD Graphics Heap Buffer Overflow DoS

The vulnerability of the rascorerasinterruptdetected function in the driver/gpu/drm/amd/ras/rascore/rascore.c file of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an...

Linux kernel multimedia device driver Heap Buffer Overflow DoS

The vulnerability of the ipu6pciprobe function in the drivers/media/pci/intel/ipu6/ipu6.c file of the Linux multimedia device driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the traceeventraweventsmcmsgevent function in the net/smc/smcTracePoint.h header file of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel netfilter EXPORT_SYMBOL_GPL() DoS

The vulnerability of the EXPORTSYMBOLGPL function in the net/netfilter/nfnetlink.osf.c module of the netfilter kernel of the Linux operating system is related to pointer manipulation. Exploitation of this vulnerability could allow a remote attacker to cause a service failure...

pvr_fwTraceDebugfsInit Heap Buffer Overflow DoS

The vulnerability of the pvrfwTraceDebugfsInit function in the drivers/gpu/drm/imagination/pvrfwTrace.c file of the Direct Rendering Infrastructure DRI driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the rdsibsendunmapop function in the net/rds/ibsend.c module, which is part of the networking functions in the Linux kernel, relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Kernel BPF Heap Buffer Overflow DoS

The vulnerability of the mapkptrmatchtype function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter for Linux kernel, relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to trigger a system failure...

CVE-2026-84045: Undefined Security Weakness

The E-cab Taxi Booking Manager for Woocommerce WordPress plugin before 2.0.5 does not validate a client-supplied trip distance and base-price value on the server before pricing a booking, allowing unauthenticated attackers to manipulate the order total down to zero and place real taxi-booking...

Prototype Pollution

Overview csv-parse is a parser converting CSV text input into arrays or objects. Affected versions of this package are vulnerable to Prototype Pollution in its duplicate-column handling, which assigns an array to obj'proto' when a header contains duplicate proto entries, triggering the proto sett...

CVE-2026-78583 Incorrect Authorization in Kibana Leading to Privilege Escalation

Incorrect Authorization CWE-863 in Kibana can lead to privilege escalation via Input Data Manipulation CAPEC-153. Elasticsearch cluster privilege declarations originating from integration packages were not validated before being used to mint credentials for enrolled Elastic Agents. A user holding...

CVE-2026-78583 Incorrect Authorization in Kibana Leading to Privilege Escalation

Incorrect Authorization CWE-863 in Kibana can lead to privilege escalation via Input Data Manipulation CAPEC-153. Elasticsearch cluster privilege declarations originating from integration packages were not validated before being used to mint credentials for enrolled Elastic Agents. A user holding...

EUVD-2026-70657

Incorrect Authorization CWE-863 in Kibana can lead to privilege escalation via Input Data Manipulation CAPEC-153. Elasticsearch cluster privilege declarations originating from integration packages were not validated before being used to mint credentials for enrolled Elastic Agents. A user holding...