Linux ext4_mb_clear_bb() and ext4_free_blocks() Buffer Overflow DoS

The vulnerabilities of the ext4mbclearbb and ext4freeblocks functions in the Linux operating system’s kernel are related to initialization errors. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

Linux __ieee80211_scan_completed Heap Buffer Overflow DoS

The vulnerability of the ieee80211scancompleted function in the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux iommu_mmio_write Heap Buffer Overflow Info Disclosure

The vulnerability of the iommummiowrite function in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

Linux hdr_find_e() Unauthorized Access

The vulnerability of thehdrfinde function in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

Linux hfs_asc2mac() Unauthenticated Access Disclosure

The vulnerability of the hfsasc2mac function in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

Linux l2cap_connect_create_rsp Buffer Overflow DoS

The vulnerability of the l2capconnectcreatersp function in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected informatio...

D-Link DSL-124 Router Authentication Bypass Information Disclosure

The vulnerability of the D-Link DSL-124 router’s microprogramming software is related to the absence of authentication for critical functions. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a POST request...

Google Chrome Background Fetch Disclosure

The vulnerability of the Google Chrome browser’s Background Fetch API programming interface is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a remote attacker to disclose sensitive information through a specially created HTM...

Ironic Python Agent qemu-img Unauthorized Access

The vulnerability of the qemu-img utility of the Ironic Python Agent IPA relates to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Qualcomm Heap Buffer Overflow Information Disclosure

The vulnerability of embedded Qualcomm software lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information during the processing of the MBN file hash segment...

PT-2026-8220

Name of the Vulnerable Software and Affected Versions Grafana versions prior to 11.6.11, 12.0.9, 12.1.6, and 12.2.4 Description A cross-tenant isolation issue exists in the Correlations feature affecting legacy correlation records. A backward compatibility condition allows records where org id = ...

ROS-20260129-73-0047

Vulnerability in nextcloud related to authorization bypass through the use of a user-controlled key. Exploitation of the vulnerability could allow a remote attacker to gain unauthorized access to protected information...

ROS-20260129-73-0013

A vulnerability in the OBEX protocol implementation of the Bluetooth protocol stack for Linux BlueZ is related to reading outside the valid range. Exploitation of the vulnerability could allow a remote attacker to gain access to protected information...

EUVD-2023-25645

Access of Memory Location After End of Buffer vulnerability in TIGERF trustlet prior to SMR Apr-2023 Release 1 allows local attackers to access protected data...

ROS-20260128-73-0025

A vulnerability in the Linux operating system kernel is related to a pointer dereferencing bug. Exploitation of the vulnerability could allow an attacker acting remotely to affect the availability of protected information...

Oracle VM VirtualBox Info Disclosure

The vulnerability of the Core component in Oracle VM VirtualBox is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to, read, modify, or delete protected information...

OpenPGP verify decrypt Disclosure

The vulnerability of the verify and decrypt functions in the npm OpenPGP library is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to obtain a valid signature for a message and disclose the protected information...

ROS-20260122-73-0002

Vulnerability in openstack-ironic-python-agent related to a flaw in the authorization procedure. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...

Apache Airflow Mask Secret Unauthorized Access

The vulnerability of the masksecret function in the Apache Airflow network programming environment is related to insufficient protection of operational data when processing template fields. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to...

Oracle Solaris Kernel Unauthorized Access

The vulnerability of the Oracle Solaris operating system’s kernel is related to insufficient protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the TCP protocol...