Aggregator

A vulnerability classified as critical has been found in MolotovCherry Android-ImageMagick7. Impacted is an unknown function. This manipulation causes out-of-bounds write. This vulnerability is tracked as CVE-2026-33854. The attack is possible to be carried out remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in linkingvision rapidvms up to PR#95. The affected element is an unknown function. Such manipulation leads to memory corruption. This vulnerability is listed as CVE-2026-33847. The attack must be carried out locally. There is no available exploit. Applying a patch is advised to resolve this issue.

A vulnerability, which was classified as problematic, was found in MolotovCherry Android-ImageMagick7. This affects an unknown function. Executing a manipulation can lead to null pointer dereference. This vulnerability is registered as CVE-2026-33853. It is possible to launch the attack remotely. No exploit is available. You should upgrade the affected component.

A vulnerability has been found in MolotovCherry Android-ImageMagick7 up to 7.1.2-10 and classified as problematic. This impacts an unknown function. The manipulation leads to integer overflow. This vulnerability is documented as CVE-2026-33855. The attack can be initiated remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability was found in MolotovCherry Android-ImageMagick7 up to 7.1.2-10. It has been classified as problematic. Affected by this vulnerability is an unknown functionality. This manipulation causes memory leak. This vulnerability appears as CVE-2026-33856. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability, which was classified as critical, was found in Open-Xchange OX Dovecot Pro up to 2.3.0. This issue affects some unknown processing of the component SCRAM Protocol Handler. Such manipulation leads to authentication bypass by capture-replay. This vulnerability is uniquely identified as CVE-2026-27855. The attack can be launched remotely. No exploit exists.

A vulnerability, which was classified as critical, has been found in Mozilla Firefox up to 148. Affected by this vulnerability is an unknown functionality. This manipulation causes memory corruption. The identification of this vulnerability is CVE-2026-4729. It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in Mozilla Firefox up to 148 and classified as problematic. The affected element is an unknown function of the component Libraries. The manipulation results in denial of service. This vulnerability is identified as CVE-2026-4727. The attack can be executed remotely. There is not any exploit available. It is suggested to upgrade the affected component.

A vulnerability, which was classified as critical, was found in FreeRDP up to 2.0.0-rc4. This impacts an unknown function of the file libfreerdp/codec/interleaved.c. Such manipulation leads to out-of-bounds write. This vulnerability is listed as CVE-2020-11524. The attack may be performed from remote. There is no available exploit.

A vulnerability was found in Mozilla Firefox up to 148. It has been declared as critical. This affects an unknown function of the component Audio/Video. Such manipulation leads to Remote Code Execution. This vulnerability is listed as CVE-2026-4724. The attack may be performed from remote. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability identified as critical has been detected in Open-Xchange OX Dovecot Pro up to 2.4.0/3.1.0. This affects an unknown function. This manipulation causes improper authentication. This vulnerability is registered as CVE-2025-59028. Remote exploitation of the attack is possible. No exploit is available. You should upgrade the affected component.

A vulnerability classified as critical has been found in FreeRDP up to 2.0.0-rc4. The affected element is an unknown function of the file libfreerdp/codec/planar.c. The manipulation leads to integer overflow. This vulnerability is referenced as CVE-2020-11521. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability, which was classified as critical, has been found in FreeRDP up to 2.0.0-rc4. This affects an unknown function of the file libfreerdp/gdi/region.c. This manipulation causes integer overflow. This vulnerability is tracked as CVE-2020-11523. The attack is possible to be carried out remotely. No exploit exists.

Lloyds Banking Group to compensate 450,000 customers after app glitch exposed data. Find out how the glitch affected…

A vulnerability has been found in docker and moby and classified as problematic. This impacts an unknown function. The manipulation leads to incorrect authorization. This vulnerability is uniquely identified as CVE-2026-34040. Local access is required to approach this attack. No exploit exists.

Вместо громких угроз взломщики выбрали тихий заработок на очищенных и упакованных базах.

A vulnerability identified as critical has been detected in Linux Kernel up to 5.15.74/6.0.3. This affects the function io_wqe. This manipulation causes memory leak. This vulnerability appears as CVE-2022-50639. The attacker needs to be present on the local network. There is no available exploit. You should upgrade the affected component.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.1.3. This affects the function pci_device_is_present. Performing a manipulation results in denial of service. This vulnerability is identified as CVE-2022-50636. The attack can only be performed from the local network. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 5.10.162/5.15.85/6.0.15/6.1.1. This impacts the function qcom_cpufreq_hw_read_lut of the component cpufreq. Executing a manipulation can lead to memory leak. This vulnerability is tracked as CVE-2022-50637. The attack is only possible within the local network. No exploit exists. You should upgrade the affected component.

A vulnerability classified as critical was found in Linux Kernel up to 6.1.3. Affected is the function swap_inode_boot_loader of the file fs/ext4/extents_status.c of the component ext4. Executing a manipulation can lead to improper initialization. The identification of this vulnerability is CVE-2022-50638. The attack needs to be done within the local network. There is no exploit available. Upgrading the affected component is advised.