The vulnerability in the driver/scsi/smartpqi/smartpqi_init.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/scsi/smartpqi/smartpqiinit.c component of the Linux operating system’s kernel is related to insufficient checking of the status of the shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Kerberos protocol for Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Win32k.sys component of the Windows operating system, which allows a hacker to compromise protected information

The vulnerability of the Win32k.sys component of the Windows operating system is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of the cloud platform used for creating and launching automated work processes in Azure Logic Apps relates to operational systems running on Windows. This vulnerability stems from deficiencies in access control, allowing attackers to exploit it to disclose sensitive information.

The vulnerability of the cloud platform used for creating and launching automated work processes in Azure Logic Apps, when operating on Windows operating systems, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to disclose sensitive...

The vulnerability of the downloader of Seattle Filmworks’ image processing library Gimp allows a hacker to execute arbitrary code and cause a service failure.

The vulnerability of the downloader of Seattle Filmworks’ image processing library for Gimp is related to buffer overflow attacks. Exploiting this vulnerability allows an attacker to execute arbitrary code and cause service interruptions...

The vulnerability of the fs/orangefs component in the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the fs/orangefs component in the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver component drivers/pmdomain/arm/scmi_pm_domain.c of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/pmdomain/arm/scmipmdomain.c component in the Linux operating system is related to the failure to release resources after the expiration of their useful lifespan. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Linux operating system’s kernel, related to errors in resource release, allows a hacker to cause a service failure.

The vulnerability of the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the `usb_gadget_state_work()` function in the `/drivers/usb/gadget/udc/core.c` file of the Linux kernel allows a hacker to induce a service failure.

The vulnerability of the usbgadgetstatework function in the /drivers/usb/gadget/udc/core.c file of the Linux kernel is related to situations where the signal processing routine is involved in a race condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of DHCP servers for Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of DHCP servers for Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted data packet...

The vulnerability of the Microsoft Outlook client, Microsoft Office packages, and 365 Apps for Enterprise, related to a potential overflow condition, allows an attacker to execute arbitrary code.

The vulnerability of the Microsoft Outlook client, Microsoft Office packages, and 365 Apps for Enterprise is related to a numerical overflow vulnerability. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted malicious file...

The vulnerability of the Windows DNS service for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Windows DNS service for Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Windows DNS service for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Windows DNS service for Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the AI-based tool for automatic analysis of root causes and effective response to incidents in Azure SRE Agent, related to the lack of authentication, allows intruders to elevate their privileges.

The vulnerability of AI-based tools for automatic analysis of root causes and effective response to incidents in Azure SRE operations is related to the lack of authentication. Exploiting this vulnerability can allow attackers, operating remotely, to increase their privileges...

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component in Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow a remote attacker to gain elevated privileges...

The vulnerability in the implementation of shared memory objects on FreeBSD’s largepage kernel allows attackers to increase their privileges.

The vulnerability of the implementation of shared memory objects in FreeBSD’s large-page cores is related to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of adding additional tools and integration libraries for the Go language that use OpenTelemetry, related to uncontrolled memory allocation, allows attackers to trigger a memory exhaustion condition.

The vulnerability of adding additional tools and integration libraries for the Go language with OpenTelemetry is related to uncontrolled memory allocation. Exploiting this vulnerability can allow a remote attacker to cause memory exhaustion...

The vulnerability of the Microsoft .NET software platform, related to integer overflow, allows attackers to escalate their privileges.

The vulnerability of the Microsoft .NET software platform is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to increase their privileges...

Vulnerability of functions EllipticCurvePublicNumbers.public_key(), EllipticCurvePublicNumbers.public_key(), load_der_public_key(), and load_pem_public_key() in the Python-cryptography cryptographic library, which allows a perpetrator to gain access to confidential data

The vulnerabilities of the functions EllipticCurvePublicNumbers.publickey, EllipticCurvePublicNumbers.publickey, loadderpublickey, and loadpempublickey in the Python-cryptography cryptographic library are related to insufficient validation of data authenticity. Exploiting these vulnerabilities...

The vulnerability of the sctp_process_asconf_param() function in the net/sctp/sm_make_chunk.c module of Linux kernel allows a hacker to elevate their privileges to the root level.

The vulnerability of the sctpprocessasconfparam function in the net/sctp/smmakechunk.c module of the Linux kernel is related to the pointer being dereferenced after its expiration. Exploiting this vulnerability could allow a malicious actor to elevate their privileges to the root level...

The vulnerability of the data_extract_all.c component in the UNIX utility commands of the BusyBox, which allows a hacker to cause a service failure.

The vulnerability of the dataextractall.c component of the UNIX utility set in BusyBox is related to external control via a filename or file path. Exploiting this vulnerability can allow an attacker to cause a service failure...

Windows (Positives) (No. 1 from 2026.08.11 10:13:23)

...

The vulnerability of the formCertListInfo() function in the /goform/CertListInfo file of the Tenda CH22 router microprogramming system, which allows a hacker to execute arbitrary commands.

The vulnerability of the formCertListInfo function in the /goform/CertListInfo file of the Tenda CH22 router microsystem is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

The vulnerability of the Lib/html/parser.py component of the Python programming language allows a hacker to gain access to confidential data and also trigger a service failure.

The vulnerability of the Lib/html/parser.py component of the Python interpreter is related to the insufficient use of the assert function. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, as well as cause service failures through the creation of...

The vulnerability of the `strip_unsafe_prefix()` function in the UNIX utility commands of the BusyBox, which allows a hacker to cause a service failure

The vulnerability of the stripunsafeprefix function in the UNIX command-line utility set of BusyBox is related to external control via a name or file path. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the validate_network_url() function in the nltk.pathsec component of the NLTK library for symbolic and statistical processing of natural language allows a attacker to perform an SSRF attack.

The vulnerability of the validatenetworkurl function in the nltk.pathsec component of the NLTK library, a software library for symbolic and statistical processing of natural language, is related to insufficient validation of requests on the server side. Exploiting this vulnerability may allow a...

The vulnerability of the Systemd service initialization and management subsystem, related to insecure privilege management, allows a attacker to trigger a service failure.

The vulnerability in the Systemd service initialization and management subsystem is related to insecure handling of privileges. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Util-linux command-line utility suite relates to incorrect definition of symbolic links before accessing files. This allows an attacker to gain access to confidential data.

The vulnerability of the Util-linux command-line utility package relates to the incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

The vulnerability of the _4_Setup() function in the install/index.php script of the DedeCMS content management system allows a hacker to execute arbitrary code.

The vulnerability of the 4Setup function in the DedeCMS content management system’s install/index.php script is related to improper external manipulation of file names or file paths. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the GNU Binutils development environment, related to the execution of operations beyond the buffer boundaries in memory, allows an attacker to trigger a service failure.

The vulnerability of the GNU Binutils development tool lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to trigger a system failure using a malicious file...

The vulnerability of the CubeSize() function in the cmslut.c component of the Little CMS color management library allows a hacker to access confidential data and also trigger a service failure.

The vulnerability of the CubeSize function in the cmslut.c component of the Little CMS color management library is related to the improper execution of certain operations. Exploiting this vulnerability could allow an attacker to access confidential data and also cause service interruptions...

The vulnerability of the Python interpreter, related to deficiencies in pathname restrictions for directories, allows attackers to compromise data integrity.

The vulnerability of the Python programming language interpreter is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability can allow attackers to compromise data integrity...

The vulnerability of the library for accessing functions of the cryptographic library OpenSSL PyOpenSSL, related to copying buffers without checking input data, allows a perpetrator to cause a service failure.

The vulnerability of the library for accessing functions of the cryptographic library OpenSSL PyOpenSSL is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Shadow MMU management mechanism for page-level shadow tables in the KVM subsystem of the Linux operating system allows a perpetrator to escalate their privileges, execute arbitrary code, or cause service interruptions.

The vulnerability of the Shadow MMU management mechanism for virtual machine tables in Linux kernel-based virtual machines is related to the dereferencing of pointers with expired lifetimes. Exploiting this vulnerability can allow an attacker to enhance their privileges, execute arbitrary code, o...

The vulnerability of the nspawn component of the initialization and service management subsystem of Systemd allows a attacker to cause a service failure.

The vulnerability of the nspawn component in the Systemd service initialization and management subsystem is related to the use of an unreliable source. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `pam_passkey_child_read_data()` function in the `src/responder/pam/pamsrv_passkey.c` file of the access control service for remote directories and the SSSD authentication mechanism allows a hacker to cause a service failure.

The vulnerability of the pampasskeychildreaddata function in the src/responder/pam/pamsrvpasskey.c file of the access control service for remote directories and the SSSD authentication mechanism is related to a buffer overflow. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the `_flatten` and `_isEqual` functions in the JavaScript library for working with arrays, Underscore, allows attackers to cause a service failure.

The vulnerability of the flatten and isEqual functions in the JavaScript library for working with arrays, Underscore, is related to the allocation of unlimited memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the Firewalld firewall configuration program, related to improper execution permissions, allows a intruder to compromise data integrity.

The vulnerability of the Firewalld firewall configuration program is related to improper execution permissions. Exploiting this vulnerability could allow an attacker to compromise data integrity...

Vulnerability of the DOM component: Security features in Firefox web browser and Thunderbird email client, which allow attackers to access confidential data

The vulnerability of the DOM component: The security of Firefox web browser and Thunderbird email client is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data remotely...

Vulnerability of the DOM component: Security features in Firefox web browser and Thunderbird email client, which allow attackers to access confidential data and compromise its integrity

Vulnerability of the DOM component: The security of Firefox web browser and Thunderbird email client is related to the lack of data security mechanisms. Exploiting this vulnerability allows a malicious actor to access confidential data and compromise its integrity...

The vulnerability in the application software interface for password reset, data visualization, and Metabase report creation tools allows for the execution of arbitrary SQL queries.

The vulnerability of the application software interface for password reset, data visualization, and report creation in the Metabase tool is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries...

The vulnerability of the LocationManager component in the Android operating system of Samsung mobile devices allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the LocationManager component in the Android operating system of Samsung mobile devices is related to the improper use of standard permissions. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the sjcl.ecc.basicKey.publicKey() function in the SJCL cryptographic library (Stanford JavaScript Crypto Library) allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the sjcl.ecc.basicKey.publicKey function in the SJCL Stanford JavaScript Crypto Library is related to the absence of a necessary encryption step. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the VMXNET3 virtual network adapter of the VMware ESX hypervisor allows a hacker to execute arbitrary code.

The vulnerability of the VMXNET3 virtual network adapter in the VMware ESX hypervisor is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of system calls unlinkat and funlinkat in the kernels of FreeBSD allows a attacker to compromise the integrity of the protected information.

The vulnerability of the unlinkat and funlinkat system calls in FreeBSD operating systems is related to authentication errors. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

The vulnerability of the Windows operating system’s kernel allows attackers to disclose sensitive information that is protected by security measures.

The vulnerability of the Windows operating system’s kernel is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to disclose the protected information...

The vulnerability of the Windows Runtime component in Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the Windows Runtime component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the SMB protocol driver, Server Network Transport Driver (srvnet.sys), in Windows operating systems, allows a perpetrator to execute arbitrary code.

The vulnerability of the SMB protocol driver, Server Network Transport Driver srvnet.sys, in Windows operating systems is related to reading data beyond the allowed range in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Vulnerability of the Widget component: Firefox web browser and Thunderbird email client, allowing attackers to trigger a service failure.

The vulnerability of the Widget component: The Firefox web browser and Thunderbird email client have a vulnerability related to an incorrect limitation on the visible layers of the user interface. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the Playback component in the Firefox web browser and Thunderbird email client allows a hacker to compromise data integrity.

The vulnerability of the Playback component in the Firefox web browser and the Thunderbird email client is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to compromise data integrity remotely...