112993 matches found
CVE-2026-95390 NULL Pointer Dereference in Wireshark
PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service...
CVE-2026-95390
The Wireshark network protocol analyzer is vulnerable to a NULL pointer dereference in the PEAK CAN TRC file parser . This flaw affects versions 4.6.0 through 4.6.8 and 4.4.19 , allowing an attacker to cause a denial of service (DoS) . To remediate this issue, users should update to the latest ve...
CVE-2026-95390 NULL Pointer Dereference in Wireshark
PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service...
CVE-2026-95390 NULL Pointer Dereference in Wireshark
PEAK CAN TRC file parser crash in 4.6.0 to 4.6.8 allows denial of service...
BIT-ENVOY-2026-73547 Envoy ext_authz: request `:path` pseudoheader dereferenced w/o null check
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's extauthz filter assumes that a request contains a :path pseudoheader when applying queryparameterstoset or queryparameterstoremove from an authorization...
Multiple vulnerabilities in Pgpool-II
Overview Pgpool-II provided by Pgpool Global Development Group contains multiple vulnerabilities listed below: Out-of-bounds Write CWE-787 - CVE-2026-92867 Improper Certificate Validation CWE-295 - CVE-2026-92868 Out-of-bounds Write CWE-787 - CVE-2026-92869 Stack-based Buffer Overflow CWE-121 -...
CLEANSTART-2026-FN35430 Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function
Security vulnerability affects the apache-superset package. Issue summary: Processing a malformed PKCS12 file can trigger a NULL pointer dereference in the PKCS12itemdecryptd2iex function...
CLEANSTART-2026-PD89526 Issue summary: PBMAC1 parameters in PKCS#12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification
Security vulnerability affects the apache-superset package. Issue summary: PBMAC1 parameters in PKCS12 files are missing validation which can trigger a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification...
CLEANSTART-2026-JU79609 Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed PKCS#12 file
Security vulnerability affects the apache-superset package. Issue summary: An invalid or NULL pointer dereference can happen in an application processing a malformed PKCS12 file...
CVE-2026-98065
A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. A local user can cause a Denial of Service DoS by creating a hash map lacking key type information and reading it through the BPF file system. Due to missing validation of BPF Type Format BTF metadata, the kernel attempt...
CVE-2026-98064
A flaw was found in the Linux kernel. A local user can cause a Denial of Service DoS and crash the system by running a specially crafted BPF Berkeley Packet Filter program. The issue occurs within the BPF Type Format BTF component when attempting to display data referencing a void data type, whic...
CVE-2026-98063
A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. When formatting data using BPF Type Format BTF, the kernel attempts to access type identifiers without checking if they are initialized. A local user with permissions to execute BPF programs can exploit this vulnerabilit...
CVE-2026-98059
A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. This issue allows a local attacker to cause a Denial of Service DoS through a system crash. The vulnerability occurs because the BPF verifier fails to recognize that process-wait tracepoint arguments can be null,...
CVE-2026-18746
parsewriteop in subsys/net/lib/lwm2m/lwm2mmessagehandling.c handles inbound CoAP WRITE/CREATE requests that carry a Block1 option. For the first block of a transfer it called initblockctx and then immediately stored the peer-selected block size with blockctx-ctx.blocksize = blocksize before...
PT-2026-109399
Уязвимость метода GetSlicers библиотеки языка Go для чтения и записи электронных таблиц excelize связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...
ROS-20260929-73-0198
The vulnerability of the drm/i915/gem component of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow a hacker to cause a service failure...
ROS-20260929-73-0013
The vulnerability of the drivers/mtd/nand/raw/cadence-nand-controller.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
ROS-20260929-73-0074
The vulnerability of the net/sched component in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-109025
Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response. Impact summary: The NULL pointer dereference happens on a read which leads to a crash and a Denial o...
PT-2026-109010
Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response. Impact summary: The NULL pointer dereference happens on a read which leads to a crash and a Denial o...