CVE-2026-47563

A flaw was found in xorg-x11-drv-nvidia. A local user can trigger an invalid memory access NULL pointer dereference in the driver's kernel mode layer. A successful exploit could allow an attacker to execute arbitrary code with elevated system privileges, access sensitive information, or cause a...

CVE-2026-63686

A NULL pointer dereference in modxml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied response with a charset whose conversion partially succeeds then fails. Users are recommended to...

CVE-2026-23398

CVE-2026-23398 Linux 커널 icmptagvalidation NULL 포인터 역참조 원격 DoS 설명 net/ipv4/icmp.c의 icmptagvalidation은 NULL 검사 없이 inetprotosproto를 역참조합니다. 원격 공격자는 등록되지 않은 내부 프로토콜 번호가 포함된 단일하게 조작된 ICMP Fragmentation Needed 패킷을 전송하여 softirq 컨텍스트에서 커널을 충돌시킬 수 있습니다. 영향: 커밋 614aefe56af8메인라인 / d938dd5a0ad7안정 6.12 이전의...

wasm2c-tableflip

wasm2c 샌드박스 탈출: 게스트 모듈이 호스트에서 셸 명령 실행 블로그 읽기: trustsig.eu/blog wasm2c/wasm-rt-impl-tableops.inc의 wasmrtallocatefuncreftable은 모듈이 선언한 요소 수로 table-size를 설정한 다음 calloc의 결과를 무시합니다. 할당이 실패하면 테이블은 data == NULL인 채로 선언된 전체 size를 유지하므로 모든 경계 검사가 여전히 통과하고 table-datai는 절대 주소 i sizeofwasmrtfuncreft가 됩니다. 요소 ...

CVE-2026-63686

The Apache HTTP Server (versions before 2.4.69 ) is vulnerable to a NULL pointer dereference within the mod_xml2enc module. An untrusted backend server can trigger a Denial of Service (DoS) by returning a crafted response with a character set that partially succeeds and then fails during conversi...

CVE-2026-63686 Apache HTTP Server: mod_xml2enc crash on charset conversion failure

A NULL pointer dereference in modxml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied response with a charset whose conversion partially succeeds then fails. Users are recommended to...

CVE-2026-63686

A NULL pointer dereference in modxml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied response with a charset whose conversion partially succeeds then fails. Users are recommended to...

EUVD-2026-90912

A NULL pointer dereference in modxml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied response with a charset whose conversion partially succeeds then fails. Users are recommended to...

DEBIAN-CVE-2026-46729

NULL Pointer Dereference vulnerability in Apache HTTP Servers modheartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-46729

NULL Pointer Dereference vulnerability in Apache HTTP Servers modheartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-46729 Apache HTTP Server: mod_heartmonitor denial of service

NULL Pointer Dereference vulnerability in Apache HTTP Servers modheartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

EUVD-2026-90887

NULL Pointer Dereference vulnerability in Apache HTTP Servers modheartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-46729

NULL Pointer Dereference vulnerability in Apache HTTP Servers modheartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-46729

Apache HTTP Server versions 2.4.0 through 2.4.68 are vulnerable to a NULL Pointer Dereference within the mod_heartmonitor module. The flaw occurs over a unicast listener , which can lead to a denial of service (DoS) condition. While the vulnerability is confirmed to impact availability, specific ...

CVE-2026-45729

CVE-2026-45729 — Разыменование нулевого указателя в ThorVG через искажённый SVG Серьёзность: CVSS 4.3 Средний — CWE-476 Уведомление: GHSA-f863-8ghq-7h64 Исправлено: ThorVG v1.0.5 Статус: Исправлено / Раскрыто Краткое описание Парсер SVG в ThorVG разыменовывает указатель, который никогда не...

practice-22-23

Проект Для запуска: ./script.sh Репозиторий на гитхаб - https://github.com/LaCinquette/practice-22-23 Ход выполнения 1. Для поиска уязвимости я выбрал проект FFmpeg. Нашел в нем коммит, который соответствовал требованиям, а именно: Соответствовал типу CWE-476 - разыменование нулевого указателя 2...

cve-2021-3449

CVE-2021-3449 Эксплойт DoS для OpenSSL Эта проблема была сообщена в OpenSSL 17 марта 2021 года компанией Nokia. Исправление было разработано Петером Кестле и Самуэлем Сапальски из Nokia. Меры по смягчению Единственное известное исправление — обновить libssl1.1. Даже если некоторые приложения по...

BIT-PGBOUNCER-2026-19888 NULL pointer dereference in SCRAM client-final-message parsing in PgBouncer

Missing validation of a mandatory attribute in the SCRAM client-final-message parser in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to crash the process. A malformed message can make the parser report success while leaving a required value unset, which is then dereferenced ...

Rocky Linux 9 [CIQ] Security Update: 389-ds-base / 389-ds-base-debuginfo / 389-ds-base-debugsource / etc (crlsa-2025_4491)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20254491 advisory. 389-ds-base: null pointer dereference leads to denial of service CVE-2025-2487 Tenable has extracted the preceding description block directly from the CIQ security...

AlmaLinux 9.2 [TuxCare] Security Update: net-snmp / net-snmp-agent-libs / net-snmp-devel / net-snmp-gui / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1745053614)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1745053614 advisory. - net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a buffer overflow in t...