Linux AEAD Privilege Escalation

The vulnerability of the module for implementing AEAD algorithms in Linux kernel systems is related to the lack of checks for the correctness of incoming requests. Exploiting this vulnerability can allow attackers to enhance their privileges...

DEBIAN-CVE-2026-34475

Varnish Cache before 8.0.1 and Varnish Enterprise before 6.0.16r12, in certain unchecked req.url scenarios, mishandle URLs with a path of / for HTTP/1.1, potentially leading to cache poisoning or authentication bypass...

CODESYS Code Execution

The vulnerability of CODESYS software products is related to the lack of checks for the correctness of the requests received. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

WordPress plugin WP Compress 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

ASPECT Enterprise Network Control Information Disclosure

The vulnerability of microprogramming software in embedded network control controllers of ASPECT Enterprise, NEXUS Series, and MATRIX Series is related to insufficient checking of incoming requests. Exploiting this vulnerability can allow an intruder to gain unauthorized access to resources and...

CVE-2023-46663

Sielco PolyEco1000 is vulnerable to an attacker bypassing authorization and accessing resources behind protected pages. The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests...

EMUI Bluetooth Disclosure

The vulnerability of the Bluetooth module of the EMUI operating system of HarmonyOS is related to the lack of checks for the validity of incoming requests. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information...