Tenda i3 wireless access point formSetCfm() Code Execution

The vulnerability of the formSetCfm function /goform/setcfm of the Tenda i3 wireless access point software is related to the execution of an operation outside the buffer in memory when processing the funcpara1 parameter. Exploiting this vulnerability could allow a malicious actor to execute...

Tenda i3 Wireless Access Point Code Execution

The vulnerability of the formWifiMacFilterGet function /goform/WifiMacFilterGet in the Tenda i3 wireless access point software is related to the operation of writing data outside of the buffer in memory when processing the index parameter. Exploiting this vulnerability could allow a malicious act...

Tenda i3 wireless access point software Command Execution

The vulnerability of the formexeCommand/goform/exeCommand function in the Tenda i3 wireless access point software is related to the operation that goes beyond the buffer in memory when processing the cmdinput parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary...

BES2300 Bluetooth SoC (Positive results) (No. 6 dated 2026.06.26 12:07:26)

...

Netlogon Remote Protocol Authentication Bypass

The vulnerability of the Netlogon Remote Protocol NRPC implementation in Windows operating systems arises from the use of a fixed zero initialization vector during data encryption in AES-CFB8 mode. Exploiting this vulnerability allows an attacker to bypass authentication procedures and gain...

libcurl HTTP/2 Dependency Management DoS

The vulnerability of the dependency management mechanism for HTTP/2, as well as the libcurl library used in the cURL client software for interacting with servers, relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow a remote attacker to caus...

Oracle WebCenter Content Unauthorized Access

Vulnerability of the Core component of the Oracle WebCenter Content application: The Imaging platform of Oracle WebCenter Content is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Run Control Management component

The vulnerability of the Run Control Management component in the PeopleSoft Enterprise CC Common Application Objects management tool is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to access and modify or delet...

Oracle WebCenter Content Unauthorized Access

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform is related to access control errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to read, update, or delete protected information...

Cluster NDB Operator Privilege Escalation

Vulnerability of the Cluster component: The NDB Operator technology for distributed data storage in MySQL NDB Cluster is vulnerable due to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges and cause service failures using the HTTP...

ansible.posix authorized_key Privilege Escalation

The vulnerability of the keyfile function in the ansible.posix.authorizedkey module is related to the incorrect definition of symbolic links when managing SSH keys. Exploiting this vulnerability could allow an attacker to enhance their privileges...

Linux USB audio driver Heap Buffer Overflow DoS

The vulnerability of the sndusbcreatestreams function in the Linux operating system’s USB audio driver is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel sendmsg DoS

The vulnerability of the sendmsg function in the Linux operating system’s kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to trigger a service failure...

AnyDesk Buffer Overflow

The vulnerability of AnyDesk remote access and management software is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted package...

MySQL PostgreSQL ProxySQL Memory Corruption

The vulnerability of the MySQL and PostgreSQL proxy-server protocol implementations relates to the execution of operations outside the memory buffer. Exploiting this vulnerability can allow a malicious actor to induce memory corruption...

ImageColumn ImageEntry Component XSS

The vulnerability of the ImageColumn and ImageEntry components in the full stack of components for accelerated development of the Filament PHP framework Laravel is related to insufficient protection of the web page structure. Exploiting this vulnerability could allow a malicious actor to perform...

Oracle WebCenter Content Unauthorized Access

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to gain unauthorized access to read, create, delete, and modify protected information...

Oracle WebCenter Content Unauthorized Access

The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform is related to the manipulation of cross-site requests. Exploiting this vulnerability could allow an attacker to gain unauthorized access to read, create, delete, and modify protected...

Run Control Management component Unauthorized Access

The vulnerability of the Run Control Management component in the PeopleSoft Enterprise CC Common Application Objects management tool is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access t...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the drmdpgetadjustrequestpostcursor function in the drivers/gpu/drm/drmdphelper.c module of Linux operating systems is related to reading data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

Linux Queue RQ DoS

The vulnerability of the queuerq function in Linux operating systems is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the mt6370probe function in Linux operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel MLME DoS

The vulnerability in the net/wireless/mlme.c module of Linux operating systems is related to insufficient input data validation. Exploiting this vulnerability can allow attackers to cause service failures...

Linux icc_bw_set() DoS

The vulnerability of the iccbwset function in Linux operating systems is related to the unlimited distribution of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux net/ipv6 icmp Heap Buffer Overflow DoS

The vulnerability of the ip6errgenicmpv6unreach function in the net/ipv6/icmp.c module of the Linux operating system is related to access to resources through incompatible types. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information or caus...

OpenBao Secret Encryption Management System Code Execution

The vulnerability of the OpenBao encryption and secret management system lies in the lack of measures taken to protect the SQL query structure during PostgreSQL database processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

OpenBao encryption Privilege Escalation

The vulnerability of the OpenBao encryption and secret management system is related to errors in restricting the assignment of security tokens. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

Linux driver multi-touch DoS

The vulnerability in the driver/multi-touch.c module of the Linux operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

PeopleSoft Enterprise SCM Purchasing Unauthorized Access

The vulnerability of the Purchasing component in Oracle PeopleSoft Enterprise SCM Purchasing is related to deficiencies in access control. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to the device through HTTP requests...

Oracle Identity Manager Connector DoS

The vulnerability of the Core component of the Oracle Identity Manager Connector, a software solution for managing user accounts and access rights, is related to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to...

Nextcloud Authentication Privilege Escalation

The vulnerability of the authentication module in cloud software for creating and using Nextcloud data storage involves flaws in the authentication process. Exploiting this vulnerability can allow attackers to increase their privileges remotely...

FreeScout support service management system Resource Exhaustion

The vulnerability of the FreeScout support service management system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

libcurl Certificate Validation

The vulnerability of the libcurl library in software applications for interacting with servers via cURL is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to remotely replace data or gain unauthorized access to protected information...

QUIC libcurl UDP Packet Reception DoS

The vulnerability of the UDP packet reception function in the QUIC library of the cURL software for interacting with servers is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability could allow a remote attacker to cause service failures...

Linux virt_wifi Module Buffer Overflow DoS

The vulnerability in the drivers/net/wireless/virtual/virtwifi.c module of the Linux kernel relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux drivers/crypto/ccp/sev-dev.c DoS

The vulnerability in the drivers/crypto/ccp/sev-dev.c module of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux drivers/crypto/ccp/sev-dev.c DoS

The vulnerability in the drivers/crypto/ccp/sev-dev.c module of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Dell Elastic Cloud Storage Privilege Escalation

The vulnerability of Dell Elastic Cloud Storage and Dell ObjectScale storage platforms lies in the insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

Linux f2fs_rename Heap Buffer Overflow DoS

The vulnerability of the f2fsrename function in the Linux operating system is related to a potential memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

libcurl WebSocket DoS

The vulnerability of the WebSocket component in the libcurl library of the cURL software’s server interaction mechanism is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

ExtractPluginFromImage() function DoS

The vulnerability of the ExtractPluginFromImage function in the OCI plugin loader of the secrets and encryption management system OpenBao involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

OpenBao encryption Authentication Unauthorized Access

The vulnerability of the TLS certificate authentication method used by the OpenBao encryption system is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to the protected information...

Linux drivers/crypto/ccp/sev-dev.c DoS

The vulnerability in the drivers/crypto/ccp/sev-dev.c module of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

Linux net/rxrpc/key.c Heap Buffer Overflow DoS

The vulnerability in the net/rxrpc/key.c module of the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Oracle E-Business Suite Knowledge Integration Sub-component Unauthenticated Access

The vulnerability of the Knowledge Integration sub-component of the Oracle HCM Common Architecture component in the Oracle E-Business Suite relates to the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized acces...

Oracle WebLogic Server Data Compromise

The vulnerability of the Oracle WebLogic Server application server’s Core component is related to access control errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

Oracle Financial Services Analytical Applications Infrastructure Unauthorized Access

The vulnerability of the Oracle Financial Services Analytical Applications Infrastructure platform component related to access control deficiencies. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information through HTTP request...

Oracle WebLogic Server Unauthorized Access

The vulnerability of the Web Services component of the Oracle WebLogic Server application server is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through HTTP...

Linux wacom_intuos_bt_irq Heap Buffer Overflow DoS

The vulnerability of the wacomintuosbtirq function in the Linux operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Linux driver module Heap Buffer Overflow DoS

The vulnerability in the drivers/hid/hid-core.c module of the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...