6075 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-46037
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv4: icmp: validate reply type before using icmppointers Extended echo replies use ICMPEXTECHOREPLY as the outbound reply type. That value is outside the range...
ECHO-E406-9590-08F0
Bulletin has no description...
ECHO-8127-8787-DF33
Bulletin has no description...
ECHO-93A8-8BC8-DFAD
Bulletin has no description...
ECHO-CFD1-A043-7D5C
Bulletin has no description...
ECHO-E379-3651-BF29
Bulletin has no description...
ECHO-15A8-1150-DD0D
Bulletin has no description...
ECHO-FD8B-B31C-648D
Bulletin has no description...
ECHO-272E-9F96-27F5
Bulletin has no description...
ECHO-7225-874A-912C
Bulletin has no description...
ECHO-A4DF-8BA1-1B3B
Bulletin has no description...
ECHO-0BD8-3C77-95C2 Vulnerability is in libheif's image-sequence / ISOBMFF track parsing, which was added in v1.20.0. v1.19.8 — the version we ship — has no track parsing at all (no Box_stsc / Box_stts / Box_saiz / TrackBox / MovieBox), so the vulnerable code is not present.
Bulletin has no description...
ECHO-480E-F2AF-BD01
Bulletin has no description...
ECHO-07BD-5728-1AD8 Assertion failure (abort/DoS) in jxl::PlaneBase::PlaneBase() reachable only when the cjxl encoder is used to encode a maliciously crafted GIF. There is no memory corruption and no upstream fix: the upstream tracking issues (#422, #762) remain open with no merged commit, and Debian rates the issue "unimportant" with a "Negligible security impact" note and no fixed version in any suite (bookworm through sid). With no upstream remediation available and negligible impact on the libjxl decode path we ship, this is not actionable as a backport.
Bulletin has no description...
ECHO-5523-AAD4-D06D
Bulletin has no description...
PT-2026-42858
Name of the Vulnerable Software and Affected Versions Nezha Monitoring versions 1.4.0 through 2.0.7 Description The dashboard allows users with the RoleMember role to access notification routes that should be restricted to administrators. Specifically, the endpoints "POST /api/v1/notification" an...
org.webjars.npm:github-com-wavesoft-local-echo (0.2.0), org.webjars.npm:launch-editor (>=2.2.1, <=2.14.1) +2 more potentially affected by CVE-2026-9277 via org.webjars.npm:shell-quote (1.10.0)
org.webjars.npm:shell-quote MAVEN version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:shell-quote and may be impacted: - org.webjars.npm:github-com-wavesoft-local-echo 0.2.0 - org.webjars.npm:launch-editor =2.2.1, =2.14.1 -...
ECHO-9793-C0AF-3276 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...