PT-2026-83325

Name of the Vulnerable Software and Affected Versions IBM Administration Runtime Expert for i version 1R1M0 Description Improper authentication enforcement may allow a remote authenticated attacker to obtain sensitive information. Recommendations At the moment, there is no information about a new...

The vulnerability in the driver/net/ethernet/cadence/macb_main.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/net/ethernet/cadence/macbmain.c component in the Linux operating system is related to improper synchronization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Corosync cluster engine, related to integer overflows, allows a attacker to cause a service failure.

The vulnerability of the Corosync cluster engine is related to a numerical overflow condition. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the QEMU hardware emulation software, related to reading data beyond the buffer’s acceptable limits, allows a hacker to trigger a service failure.

The vulnerability of the QEMU hardware emulation software is related to reading data from buffer files beyond acceptable limits. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of HPLIP printer drivers, related to the execution of operations beyond the buffer boundaries in memory, allows a hacker to cause a service failure.

The vulnerability of HPLIP printer drivers is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the lib/nghttp2_session.c component, part of the HTTP/2 implementation by Nghttp2, allows a attacker to cause a service failure.

The vulnerability of the lib/nghttp2session.c component in the HTTP/2 implementation of Nghttp2 is related to the insufficient use of the assert function. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the remote.c component in the vorbis-tools set of tools for working with audio files allows a hacker to trigger a service failure.

The vulnerability of the remote.c component in the vorbis-tools set of tools for working with audio files is related to a violation of the buffer’s initial boundary. Exploiting this vulnerability could allow an attacker, operating remotely, to cause a service failure...

The vulnerability of the Open vSwitch software-based multi-level switch lies in the reading of data beyond the allowed buffer limits, which allows a hacker to cause a service failure.

The vulnerability of the Open vSwitch multi-level switch lies in reading data from buffers beyond their acceptable limits. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the QEMU hardware emulation software, related to reading data beyond the buffer’s allowed limits, allows a hacker to gain access to confidential data.

The vulnerability of the QEMU hardware emulation software is related to reading data from buffer registers beyond their allowable limits. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

The vulnerability in the lib/LWP/UserAgent.pm module, a set of modules for working with LWP::UserAgent web resources, allows a perpetrator to access confidential data.

The vulnerability of the lib/LWP/UserAgent.pm component, a module for working with LWP::UserAgent web resources, is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data...

The vulnerability of the Rsync file transfer and synchronization utility, related to errors in processing parameter length settings, allows a hacker to trigger a service failure.

The vulnerability of the Rsync file transfer and synchronization utility is related to errors in processing parameter length settings. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Vulnerability of Firefox web browsers, Firefox ESR, and Thunderbird email client: This vulnerability arises from operations beyond the buffer in memory, allowing attackers to trigger a service failure.

The vulnerability in web browsers Firefox, Firefox ESR, and the email client Thunderbird is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2026-82072

Out of bounds read in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-78239 Xiiaozet LK100W Missing Authentication for Critical Function

Xiiaozet LK100W exposes a critical management function that can be invoked without authentication, allowing a remote attacker to enable administrative services that should be restricted. Successful exploitation may permit unauthorized access to the device...

CVE-2026-73125 Ebyte NA111-M Missing Authentication for Critical Function

Ebyte device web management interface does not consistently enforce authentication before granting access to administrative functionality. An unauthenticated remote attacker could access sensitive configuration information, modify device settings, or disrupt availability...

CVE-2026-78002

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

CVE-2026-76098

A flaw was found in Mistune, a Python Markdown parser. This vulnerability allows a remote attacker to trigger a Denial of Service DoS by submitting specially crafted Markdown input. The excessive use of emphasis markers, such as consecutive asterisks, creates deeply nested tokens during HTML...

CVE-2026-63384

A flaw was found in Libevent. An incorrect integer conversion in the evtagunmarshalheader function allows a remote attacker to provide a specially crafted payload length. This can lead to a wrapped large allocation request, resulting in a denial of service DoS for the affected system. Mitigation...

EUVD-2026-66955

A remote attacker with user privileges may use a malicious or compromised NASL vulnerability test VT on the affected products to trigger a stack buffer overflow and gain full access on the compromised system...

EUVD-2026-66830

An unauthenticated remote attacker who can send a single UDP packet to a Spring Integration UDP inbound adapter can cause the server to emit an outbound UDP datagram to an arbitrary internal or external host and port of the attacker's choosing. Spring Integration 7.1.0 Spring Integration 7.0.0 -...