1606 matches found
CVE-2026-3100
The FTP Backup on the ADM will not properly strictly enforce TLS certificate verification while connecting to an FTP server using FTPES/FTPS. An improper validated TLS/SSL certificates allows a remote attacker can intercept network traffic to perform a Man-in-the-Middle MitM attack, which may...
DyMA-Fuzz: Dynamic Direct Memory Access Abstraction for Re-Hosted Monolithic Firmware Fuzzing
The rise of smart devices in critical domains--including automotive, medical, industrial--demands robust firmware testing. Fuzzing firmware in re-hosted environments is a promising method for automated testing at scale, but remains difficult due to the tight coupling of code with a...
The vulnerability of the crash_load_segments() function in the arch/x86/kernel/crash.c module, which is part of the Linux kernel support for x86 platforms, allows a hacker to cause a system failure.
The vulnerability of the crashloadsegments function in the arch/x86/kernel/crash.c module of the Linux operating system’s kernel support for x86 processors is related to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to cause a system failure...
ROS-20260202-73-0036
A vulnerability in the pciregisterhostbridge function of the Linux operating system kernel is related to memory re-release. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
ROS-20260128-73-0027
A vulnerability in the rtnllock function of the Linux kernel is associated with a hang due to resource re-locking. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...
Putting Privacy to the Test: Introducing Red Teaming for Research Data Anonymization
Recently, the data protection practices of researchers in human-computer interaction and elsewhere have gained attention. Initial results suggest that researchers struggle with anonymization, partly due to a lack of clear, actionable guidance. In this work, we propose simulating re-identification...
PT-2026-4884
An issue from the component luaG runerror in dependencies/lua/src/ldebug.c in praydog/REFramework version before 1.5.5 leads to a heap-buffer overflow when a recursive error occurs...
Security update for keylime
This update for keylime fixes the following issues: CVE-2025-13609: avoid re-registration of clients with same UUID but with different TPM identity bsc1254199. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
SUSE-SU-2026:0217-1 Security update for keylime
This update for keylime fixes the following issues: - CVE-2025-13609: avoid re-registration of clients with same UUID but with different TPM identity bsc1254199...
Azure Linux 3.0 Security Update: kernel (CVE-2024-46711)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46711 advisory. - In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: fix ID 0 endp usage after...
ROS-20260119-7387
A vulnerability in the usbgcmdwork and botcmdwork functions of the USB driver drivers/usb/gadget/function/ftcm.c of the Linux kernel is related to memory re-release. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
ROS-20260119-7305
A vulnerability in the uvcstatusinit function of the Linux operating system kernel is associated with a memory re-release error. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information...
CVE-2025-14435
Mattermost versions 10.11.x = 10.11.8, 11.1.x = 11.1.1, 11.0.x = 11.0.6 fail to prevent infinite re-renders on API errors which allows authenticated users to cause application-level DoS via triggering unbounded component re-render loops...
GHSA-MX8M-V8QM-XWR8 Mattermost is vulnerable to DoS due to infinite re-renders on API errors
Mattermost versions 10.11.x = 10.11.8, 11.1.x = 11.1.1, 11.0.x = 11.0.6 fail to prevent infinite re-renders on API errors which allows authenticated users to cause application-level DoS via triggering unbounded component re-render loops...
CVE-2025-14435
Mattermost versions 10.11.x = 10.11.8, 11.1.x = 11.1.1, 11.0.x = 11.0.6 fail to prevent infinite re-renders on API errors which allows authenticated users to cause application-level DoS via triggering unbounded component re-render loops...
CVE-2025-14435
Summary (CVE-2025-14435): Mattermost contains a application-level DoS vulnerability due to unbounded React component re-renders triggered by API errors. Affected versions are 10.11.x ≤ 10.11.8, 11.1.x ≤ 11.1.1, and 11.0.x ≤ 11.0.6. The issue arises because errors from API responses fail to stop r...
EUVD-2026-2916
Mattermost versions 10.11.x = 10.11.8, 11.1.x = 11.1.1, 11.0.x = 11.0.6 fail to prevent infinite re-renders on API errors which allows authenticated users to cause application-level DoS via triggering unbounded component re-render loops...
CVE-2025-14435 Application-Level DoS via infinite re-render loop in user profile handling
Mattermost versions 10.11.x = 10.11.8, 11.1.x = 11.1.1, 11.0.x = 11.0.6 fail to prevent infinite re-renders on API errors which allows authenticated users to cause application-level DoS via triggering unbounded component re-render loops...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003867)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003867 advisory. A memory leak in the bnxtrecreatesrq function in drivers/infiniband/hw/bnxtre/ibverbs.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of...
CVE-2025-71092
In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxtre: Fix OOB write in bnxtrecopyerrstats Commit ef56081d1864 "RDMA/bnxtre: RoCE related hardware counters update" added three new counters and placed them after BNXTREOUTOFSEQERR. BNXTREOUTOFSEQERR acts as a boundary mark...