110753 matches found
PT-2026-114390
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL-pointer dereference occurs in the pwrseq device register function. If the dev set name function fails, the system jumps to the err put pwrseq label before the pwrseq-targets...
PT-2026-113775
Name of the Vulnerable Software and Affected Versions Nezha Monitoring versions 2.2.7 through 2.2.10 Description A nil pointer dereference occurs in the ServiceSentinel.worker function within service/singleton/servicesentinel.go. The issue arises when the worker checks an owned service under...
PT-2026-113796
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS affected versions not specified Juniper Networks Junos OS Evolved affected versions not specified Description A NULL Pointer Dereference occurs in the routing protocol daemon rpd, which can lead to a denial of service...
CVE-2026-101961: NULL Pointer Dereference
A NULL Pointer Dereference vulnerability in the routing-policy nexthop-ECMP matcher of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP peer to cause a routing-daemon denial of service via a specific BGP packet received while a nexthop-ecmp qualifier is attached to a BGP...
CVE-2026-100394: Concurrent Execution using Shared Resource with Improper Synchronization
Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. From 2.2.7 until 2.2.11, ServiceSentinel.worker in service/singleton/servicesentinel.go checked an owned service under servicesLock and later dereferenced pointer-valued serviceStatusToday and...
CVE-2026-101977: NULL Pointer Dereference
A NULL Pointer Dereference vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured eBGP peer to cause a persistent routing-daemon denial of service via a specific BGP packet when ephemeral configuration is used...
CVE-2026-101341: Stack-based Buffer Overflow
Tokens of text in RDATA of for example TXT records under 32 bytes are not checked to stay within the space reserved for the RDATA allowing for arbitrary sized out of bound stack writes, including an overwrite of a callback function pointer which is called directly after parse. Zone files which ar...
CVE-2026-101939: NULL Pointer Dereference
A NULL Pointer Dereference vulnerability in the routing protocol daemon RPD of Juniper Networks Junos OS and Junos OS Evolved allows a configured peer sending a BGP UPDATE to cause a denial of service when an import policy with then source-based-forwarding next-hop next-table is configured to...
CVE-2026-101949: NULL Pointer Dereference
A NULL Pointer Dereference vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated remote BGP neighbor to cause a denial of service via a VPN-flowspec BGP update if it is readvertised and BMP post-policy RIB-out monitoring is...
CVE-2026-98412
In the Linux kernel, the following vulnerability has been resolved: power: sequencing: fix NULL-pointer dereference in pwrsequnitnew If memory allocation fails in pwrsequnitsetupdeps, pwrsequnitput is called to release the partially initialized unit. However, we've never initialized unit-list and...
CVE-2026-102018: NULL Pointer Dereference
A NULL Pointer Dereference vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a denial-of-service condition via a malformed PIM Bidir message...
CVE-2026-110659: NULL Pointer Dereference
ELFIO through 3.12 contains a NULL pointer dereference vulnerability in relocationsectionaccessor getentry that allows attackers to crash applications via an unvalidated shlink index. Attackers can supply a crafted ELF file whose SHTREL or SHTRELA section has a dangling shlink, causing...
CVE-2026-98411
In the Linux kernel, the following vulnerability has been resolved: power: sequencing: fix NULL-pointer dereference in pwrseqdeviceregister If devsetname fails in pwrseqdeviceregister, we jump to the errputpwrseq label before initializing pwrseq-targets. pwrseqrelease will try to iterate over...
CVE-2026-101941: NULL Pointer Dereference
A NULL Pointer Dereference vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP neighbor to cause a denial of service via a BGP route update when specific routing-policy resolution-map and policy event-tracing configuration is...
CVE-2026-102028: NULL Pointer Dereference
A NULL Pointer Dereference vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a remote BGP peer to cause a denial of service when multiple UPDATEs occur over a single TCP session with 'bgp family l2vpn auto-discovery-only' configured...
CVE-2026-110600: NULL Pointer Dereference
xlsxio through 0.2.37 contains a NULL pointer dereference vulnerability in mainsheetgetsheetfileexpatcallbackelementstart in lib/xlsxioread.c that allows attackers to crash applications via crafted files. Attackers can supply a .xlsx file whose workbook.xml.rels contains a worksheet Relationship...
CVE-2026-98411: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: power: sequencing: fix NULL-pointer dereference in pwrseqdeviceregister If devsetname fails in pwrseqdeviceregister, we jump to the errputpwrseq label before initializing pwrseq-targets. pwrseqrelease will try to iterate over...
CVE-2026-102013: NULL Pointer Dereference
A NULL Pointer Dereference vulnerability in the na-grpcd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated attacker with access to the chassis-internal network to cause a denial of service via a network message...
CVE-2026-110602: Access of Uninitialized Pointer
libmspack through 0.11alpha contains an uninitialized pointer free vulnerability in kwajdopen in mspack/kwajd.c that frees unzeroed filename and extra pointers on header read errors. Attackers can supply a truncated, empty, or wrong-signature KWAJ file to crash the process or obtain an...
