641206 matches found
CVE-2026-68763
A flaw was found in Apache Tomcat. This vulnerability, an uncontrolled resource consumption issue, arises from an allocation leak in the HTTP/2 backlog tracking when a stream is reset. A remote attacker could exploit this to cause a Denial of Service DoS, making the server unresponsive or...
CVE-2023-31308
A malicious virtual function can invoke certain command handlers in the SMU , causing a denial of service due to an out-of-bounds memory read . Per AMD's CVSS 3.1 rating, the impact is LOW (3.3) with a local attack vector requiring low privileges and no user interaction, affecting only availabili...
CVE-2023-31308
A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory read...
EUVD-2023-60610
A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory read...
CVE-2026-14367 I3C IBI work-node free-list data race between ISR and workqueue thread
The I3C IBI subsystem in drivers/i3c/i3cibiworkq.c hands out statically-allocated work nodes through a free-list i3cibiworknodesfree implemented as a plain sysslistt, which provides no synchronization. The allocation helpers i3cibiworkenqueue, i3cibiworkenqueuetargetirq, i3cibiworkenqueuehotjoin,...
CVE-2026-14367 I3C IBI work-node free-list data race between ISR and workqueue thread
The I3C IBI subsystem in drivers/i3c/i3cibiworkq.c hands out statically-allocated work nodes through a free-list i3cibiworknodesfree implemented as a plain sysslistt, which provides no synchronization. The allocation helpers i3cibiworkenqueue, i3cibiworkenqueuetargetirq, i3cibiworkenqueuehotjoin,...
EUVD-2026-68718
The I3C IBI subsystem in drivers/i3c/i3cibiworkq.c hands out statically-allocated work nodes through a free-list i3cibiworknodesfree implemented as a plain sysslistt, which provides no synchronization. The allocation helpers i3cibiworkenqueue, i3cibiworkenqueuetargetirq, i3cibiworkenqueuehotjoin,...
CVE-2026-14367
CVE-2026-14367 affects the Zephyr RTOS I3C IBI subsystem in drivers/i3c/i3c_ibi_workq.c. A statically-allocated work-node free-list (sys_slist_t) is accessed without synchronization: ISR-context callers invoke sys_slist_get() while the workqueue thread calls sys_slist_append(). This data race can...
CVE-2026-62299
A flaw was found in CoreDNS, a DNS server. A remote, unauthenticated client can exploit this vulnerability by sending a specially crafted DNS query that triggers a null pointer dereference in the rewrite plugin's EDNS0 response handling. This can lead to a denial of service DoS where the CoreDNS...
nodejs:24 security update
An update is available for module.nodejs, nodejs, module.nodejs-packaging, nodejs-packaging, nodejs-nodemon, module.nodejs-nodemon. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
RLSA-2026:61386 Important: nodejs:24 security update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion...
CVE-2021-2471
CVE-2021-2471 - XXE in MySQL Connector/J Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 8.0.26 and prior. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access ...
BrotherVulnerabilities
Múltiples dispositivos Brother: Múltiples vulnerabilidades Resumen Rapid7 llevó a cabo un proyecto de investigación de día cero sobre impresoras multifunción MFP de Brother Industries, Ltd. Esta investigación dio como resultado el descubrimiento de ocho nuevas vulnerabilidades. Se ha identificado...
libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client
A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fsreadglyphs function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the...
libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write
A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privile...
libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write
A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privile...
libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client
A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fsreadglyphs function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the...
CVE-2018-8065
خادم Flexense HTTP Server-Enable web server on port. تؤدي الوحدة إلى حدوث انتهاك وصول للكتابة في مساحة ذاكرة عملية syncbrs.exe. يتراوح عدد الطلبات التي تتسبب في تعطل الخادم بين 200-1000 حسب إصدار نظام التشغيل وذاكرة النظام. يُذكر أن الإصدار Sync Breeze Enterprise 10.6.24 معرّض للثغرة. الاستغلالات...
Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Html-Injection
CVE-2021-46079 Título del exploit: Vehicle Service Management System: la carga de archivos 'múltiple' conduce a inyección de HTML Autor del exploit: SANU P.L CVE: CVE-2021-46079 CVSS: 7.2 ALTA Referencias:...
CVE-2026-65400
CVE-2026-65400 Por primera vez en mucho tiempo, tenemos un RCE en MacOS. Descubierto originalmente por @osxreverser, y posteriormente ampliado por bynar.io. Ver https://blog.calif.io/p/no-country-for-old-passwords para más información. Esto se deriva principalmente del trabajo de @panchocosil...