599084 matches found
The vulnerability of the kvm_hvFlush_tlb() function in the arch/x86/kvm/hyperv.c module of the virtualization subsystem on the Linux kernel-based x86 platform allows a hacker to cause a service failure.
The vulnerability of the kvmhvFlushtlb function in the arch/x86/kvm/hyperv.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the kvm_riscv_vcpu_alloc_vector_context() function in the arch/riscv/kvm/vcpu_vector.c module, which is part of the Linux operating system’s RISCV processor support, allows a attacker to cause a service failure.
The vulnerability of the kvmriscvvcpuallocvectorcontext function in the arch/riscv/kvm/vcpuvector.c module, which is part of the Linux operating system’s RISCV processor support, involves unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to cause a service...
The vulnerability of the papr_hvpipe_handle_read() function in the arch/powerpc/platforms/pseries/papr-hvpipe.c module allows a hacker to cause a service failure under Linux’s PowerPC platform.
The vulnerability of the paprhvpipehandleread function in the arch/powerpc/platforms/pseries/papr-hvpipe.c module is related to the use of an uninitialized resource on the PowerPC platform. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the virtio_transport_recv_listen() function in the net/vmw_vsock/virtio_transport_common.c file, a part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.
The vulnerability of the virtiotransportrecvlisten function in the net/vmwvsock/virtiotransportcommon.c file, which is part of the networking functions of the Linux kernel, is related to errors during the update of the link counters. Exploiting this vulnerability could allow an attacker to cause ...
The vulnerability of the vsock_update_buffer_size() function in the net/vmw_vsock/af_vsock.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the vsockupdatebuffersize function in the net/vmwvsock/afvsock.c module, which is part of the Linux kernel’s networking functions, is related to the incorrect order of operation of the input data validation mechanism. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the R7WebsSecurityHandler() function in the /goform/ate file of the Web UI component of the Tenda AC1206 microprogramming device, which allows a hacker to gain full control over the system
The vulnerability of function R7WebsSecurityHandler in the /goform/ate file of the Web UI component of the Tenda AC1206 microprogramming device for routers is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...
The vulnerability of the tlmi_analyze() function in the drivers/platform/x86/think-lmi.c driver for X86 devices in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the tlmianalyze function in the drivers/platform/x86/think-lmi.c driver for X86 devices in the Linux operating system is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failur...
The vulnerability of the unix_stream_connect() function in the net/unix/af_unix.c module, which implements networking functions for the Linux operating system’s kernel, allows a hacker to cause a service failure.
The vulnerability of the unixstreamconnect function in the net/unix/afunix.c module, which is part of the Linux kernel’s networking functions, involves the failure to release resources after their useful period has ended. Exploiting this vulnerability could allow an attacker to cause service...
The vulnerability of the nft_bitwise_init_shift() function in the net/netfilter/nft_bitwise.c module of the netfilter component in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the nftbitwiseinitshift function in the net/netfilter/nftbitwise.c module of the netfilter component in the Linux operating system’s kernel is related to an incorrect bitwise shift of a integer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the usblp_cache_device_id_string() function in the drivers/usb/class/usblp.c module of the Linux operating system’s USB device driver allows a hacker to cause a service failure.
The vulnerability of the usblpcachedeviceidstring function in the drivers/usb/class/usblp.c module of the Linux device driver framework relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a system failure...
The vulnerability of the `ovs_netdev_tunnelDestroy()` function in the `net/openvswitch/vport-netdev.c` module, which supports Open vSwitch routers in the Linux operating system, allows a malicious actor to cause a service failure.
The vulnerability of the ovsnetdevtunnelDestroy function in the net/openvswitch/vport-netdev.c module, which supports Open vSwitch routers in the Linux operating system, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failur...
PT-2026-85250
parsedmarc 9.0.6 before 11.0.1 writes forensic report sample files using an output path derived from the email subject. When the subject consists entirely of path traversal sequences, the filename sanitization function produces an empty string, and a fallback to the raw unsanitized subject causes...
PT-2026-84951
In the Linux kernel, the following vulnerability has been resolved: ovpn: run deferred work on a module-owned workqueue ovpn queues several work items whose callbacks execute module text. These works currently run on the global system workqueues, so module exit has no driver-owned drain point tha...
PT-2026-85312
Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network...
PT-2026-85360
Summary toml.parse writes attacker-controlled keys onto Object.prototype. The compiler protects the tables it builds by creating them with Object.createnull, which neutralizes a direct proto table. An attacker bypasses that protection by routing a table path through a scalar value and into the re...
CVE-2026-73812
httpd function checkheader/3 rejects duplicate Content-Length per CVE-2026-23941 but never checks for the TE+CL co-presence that RFC 9112 §6.3 identifies as a probable smuggling attempt. handlebody/3 frames by chunked and silently discards Content-Length. A CL-preferring front-end paired with...
PT-2026-85341
Summary toml.parse crashes with an uncaught RangeError: Maximum call stack size exceeded when parsing deeply nested arrays or inline tables. The parser is generated by Peggy 5.1.0 a PEG parser generator as a recursive-descent parser; the value rule mutually recurses with the array and inline-tabl...
PT-2026-85080
A vulnerability was detected in SeaCMS up to 13.6. Affected is the function addslashes of the file weixin/index.php of the component WeChat Module. The manipulation of the argument Content results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...
PT-2026-85009
A vulnerability has been found in NousResearch hermes-agent 0.18.0. This affects the function fetchLinkTitle of the file apps/desktop/src/app/artifacts/index.tsx of the component Link Title Fetch. Such manipulation of the argument url leads to server-side request forgery. The attack can be launch...
PT-2026-85004
n8n versions before 2.34.1 contain a server-side request forgery vulnerability in the legacy request helper function exposed to Code and Function nodes. The validation logic checks the uri property for SSRF safety while the underlying HTTP client uses the url property when both are present,...