ROS-20260925-73-0186

The vulnerability of the qcomglinkallocchannel function in the drivers/rpmsg/qcomglinknative.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20260925-73-0152

The vulnerability of the anyseemasterxfer function in the drivers/media/usb/dvb-usb-v2/anysee.c file of the Linux multimedia device driver framework involves pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-99003

OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao used EscapeLDAPValue, an RFC 4514 distinguished-name escaping function, where RFC 4515 LDAP search-filter escaping was required in sdk/helper/ldaputil/client.go GetUserDN. With the LDAP authentication...

PT-2026-98905

Name of the Vulnerable Software and Affected Versions RabbitMQ versions prior to 3.13.18 RabbitMQ versions prior to 4.0.23 RabbitMQ versions prior to 4.1.14 RabbitMQ versions prior to 4.2.9 RabbitMQ versions prior to 4.3.3 Description An issue exists where the fill/2 function substitutes the...

PT-2026-98337

Name of the Vulnerable Software and Affected Versions ningzichun student-management-system versions prior to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf Description A flaw in an unknown function allows remote attackers to perform a manipulation that results in cross-site request forgery, a type of...

org.apache.camel/camel-mail: Apache Camel: Injected MIME headers can manipulate route behavior

A flaw was found in Apache Camel's camel-mail component. The MimeMultipart data format copies MIME headers from an incoming message onto the Camel message when unmarshalling with headersInline=true, without applying a HeaderFilterStrategy. An attacker who can provide a crafted MIME message may...

camel-aws2-sqs: Apache Camel: Camel-AWS2-SQS: Inbound message attributes are mapped into the Exchange without an inbound HeaderFilterStrategy, allowing a message sender to inject Camel control headers

A flaw was found in Apache Camel AWS2-SQS Component. This vulnerability allows a remote attacker, with permissions to send messages to a consumed SQS queue, to inject arbitrary Camel control headers into the message exchange. This is due to a missing inbound header filter strategy. The injected...

camel-nats: Apache Camel: Camel-NATS: Inbound NATS message headers are mapped into the Exchange without a configured HeaderFilterStrategy, allowing a client that can publish to the subject to inject Camel control headers

A flaw was found in Apache Camel NATS component. Due to improper input validation, a client capable of publishing to a NATS subject can inject arbitrary Camel control headers into the Camel Exchange. These injected headers can then influence the behavior of downstream producers in the route,...

CVE-2026-73064

In Mbed TLS 3.2.0 though 3.6.6 and 4.0.0 through 4.1.0, an attacker who can cause an entropy source to fail can remove or inject bytes into the start of the TLS stream. This only affects TLS 1.3 servers...

CVE-2026-96880 TaleLin lin-cms-spring-boot book Endpoint BookController.java getBook improper authorization

A vulnerability was found in TaleLin lin-cms-spring-boot up to 0.2.1. This impacts the function getBook of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. Performing a manipulation of the argument ID results in improper...

CVE-2026-96880 TaleLin lin-cms-spring-boot book Endpoint BookController.java getBook improper authorization

A vulnerability was found in TaleLin lin-cms-spring-boot up to 0.2.1. This impacts the function getBook of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. Performing a manipulation of the argument ID results in improper...

PT-2026-98248

Name of the Vulnerable Software and Affected Versions ServiceNow AI Platform affected versions not specified Description An improper access control issue exists within the ServiceNow AI Platform. This flaw could allow an unauthenticated user to create, modify, or delete instance data beyond...

ROS-20260924-73-0048

The vulnerability of the logreplay function in the fs/ntfs3/fslog.c file of the NTFS file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20260924-73-0021

The vulnerability of the doovlgetacl function in the fs/overlayfs/inode.c file of the Overlayfs file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260924-73-0019

The vulnerability of the pnvpcisriovdisable function in the arch/powerpc/platforms/powernv/pci-sriov.c module of the PowerPC platform support for the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260924-73-0018

The vulnerability of the smcrportadd function in the net/smc/smccore.c module of the SMC protocol family implementation in Linux kernel involves pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260924-73-0033

The vulnerability of the qedfallocglobalqueues function in the drivers/scsi/qedf/qedfmain.c file of the Linux operating system’s SCSI device driver kernel module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260924-73-0041

The vulnerability of the niclear function in the fs/ntfs3/frecord.c module of the NTFS file system in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

CVE-2026-97404: Use of Less Trusted Source

In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Signature header. By sending a request with an empty URL-Signature header, an unauthenticated remote attacker who knows a target project's UUID may bypass both Keystone authentication and pre-signed URL verification, resulting in...

ROS-20260924-73-0042

The vulnerability of the blkcgactivatepolicy function in the block/blk-cgroup.c module, which supports the block-level kernel in the Linux operating system, is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to trigger a service failure...