PT-2026-6711

Name of the Vulnerable Software and Affected Versions AMS module affected versions not specified Description A permission control issue exists within the AMS module. Successful exploitation of this issue may impact system availability. Recommendations At the moment, there is no information about ...

PT-2026-6702

Name of the Vulnerable Software and Affected Versions Huawei HarmonyOS affected versions not specified Description An out-of-bounds write issue exists in the camera module. Successful exploitation of this issue may affect system availability. Recommendations At the moment, there is no information...

PT-2026-6774

Name of the Vulnerable Software and Affected Versions OpenSTAManager versions 2.9.8 and earlier Description OpenSTAManager contains a critical Error-Based SQL Injection issue within the Scadenzario Payment Schedule module’s bulk operations handler. The application does not properly validate that...

PT-2026-6698

Name of the Vulnerable Software and Affected Versions HDC module affected versions not specified Description An address read issue exists in the HDC module. Successful exploitation could impact system availability and confidentiality. Recommendations At the moment, there is no information about a...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system developed by Chinese company Huawei. It is a full-scenario distributed operating system based on a microkernel architecture. There is a security vulnerability in Huawei HarmonyOS, which stems from improper permission control in the printing module. This...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A buffer overflow vulnerability exists in the Huawei HarmonyOS Image Module, which stems from the Image Module failing to properly validate the length and si...

PT-2026-6695

Name of the Vulnerable Software and Affected Versions versions prior to 2026 Description A type confusion issue exists in the camera module. Successful exploitation of this issue may impact system availability. Recommendations At the moment, there is no information about a newer version that...

PT-2026-6713

Name of the Vulnerable Software and Affected Versions versions prior to 2026-24927 Description An out-of-bounds access issue exists in the frequency modulation module. Successful exploitation could impact system availability. Recommendations At the moment, there is no information about a newer...

PT-2026-6704

Name of the Vulnerable Software and Affected Versions versions prior to 2026 affected versions not specified Description A use-after-free UAF concurrency vulnerability exists within the graphics module. Successful exploitation of this issue may impact system availability. Recommendations At the...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system developed by Chinese company Huawei. It is a full-scenario distributed operating system based on a microkernel architecture. There is a security vulnerability in Huawei HarmonyOS, which stems from a concurrency issue in the graphical module’s reutilization...

Huawei EMUI和Huawei HarmonyOS 安全漏洞

Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. An address reading vulnerability exists in the Huawei EMUI and Huawei HarmonyOS communication module, which can b...

Huawei EMUI和Huawei HarmonyOS 安全漏洞

Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. A privilege control type vulnerability exists in the Huawei EMUI and Huawei HarmonyOS AMS module, which can be...

The vulnerability of the xfrm_state_delete_tunnel() function in the net/xfrm/xfrm_state.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the xfrmstatedeletetunnel function in the net/xfrm/xfrmstate.c module of the Linux kernel is related to state management errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the multiq3_attach() function in the drivers/comedi/drivers/multiq3.c module allows attackers to cause a service failure for Linux operating system-based data collection devices.

The vulnerability of the multiq3attach function in the drivers/comedi/drivers/multiq3.c module, which supports Linux kernel-based data collection devices, is related to the improper disabling or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service...

PT-2026-6700

Name of the Vulnerable Software and Affected Versions HDC module affected versions not specified Description A permission control issue exists in the HDC module. Successful exploitation could compromise service confidentiality. Recommendations At the moment, there is no information about a newer...

Atlassian Confluence 7.19 < 8.5.31 / 8.6.x < 9.2.13 / 9.3.x < 10.2.2 (CONFSERVER-101872)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-101872 advisory. - Critical XXE in Apache Tika tika-core 1.13-3.2.1, tika-pdf-module 2.0.0-3.2.1 and tika-parsers 1.13-1.28.5 modules on all platforms allows an...

PT-2026-6703

Name of the Vulnerable Software and Affected Versions versions prior to 2026-24929 Description An out-of-bounds read issue exists in the graphics module. Successful exploitation could impact system availability. Recommendations At the moment, there is no information about a newer version that...

CVE-2025-69215

OpenSTAManager is an open source management software for technical assistance and invoicing. In version 2.9.8 and prior, there is a SQL Injection vulnerability in the Stampe Module. At time of publication, no known patch exists...

CVE-2025-15343 Tanium addressed an incorrect default permissions vulnerability in Enforce.

Tanium addressed an incorrect default permissions vulnerability in Enforce...

Infinite loop

Overview @enclave-vm/core is a Sandbox runtime for secure JavaScript code execution Affected versions of this package are vulnerable to Infinite loop via infinite recursion in the vm module. An attacker can execute arbitrary code outside the intended sandbox by crafting recursive calls that explo...