5962 matches found
ECHO-25A3-6CBD-BABE
Bulletin has no description...
ECHO-1CCE-8D16-512E
Bulletin has no description...
ECHO-1323-54F5-145D
Bulletin has no description...
ECHO-5890-0D66-9E2E
Bulletin has no description...
ECHO-C4C8-ED80-A411
Bulletin has no description...
ECHO-47D2-DDD1-74A0
Bulletin has no description...
PT-2026-91306
In the Linux kernel, the following vulnerability has been resolved: ipv6: seg6: clear IPv4 control block on IPIP decapsulation End.DX4 and End.DT4 decapsulate an IPv4 packet through decap and validate and send it directly to IPv4 routing. The inner packet therefore bypasses ip rcv core, which...
ECHO-B7BC-591C-5019
Bulletin has no description...
ECHO-7750-C349-C5E0
Bulletin has no description...
ECHO-5339-AD7C-F545
Bulletin has no description...
ECHO-3EB2-A6D4-7B02 The detached-tree X-mount.subdir path arrived in 2.42 (ae19f7546); our libmount has no AT_SYMLINK_NOFOLLOW, no api->subdir in hook_mount.c and no 6.15 logic. Upstream shipped 2.41.6 the same day as 2.42.3 with the other three CVEs and deliberately not this one. Debian marks trixie vulnerable but also bookworm 2.38.1, which predates the path entirely. https://security-tracker.debian.org/tracker/CVE-2026-78409
Bulletin has no description...
ECHO-B20E-705A-6D36
Bulletin has no description...
github.com/labstack/echo: Echo: Unauthorized Information Disclosure via URL Path Decoding Discrepancy
A flaw was found in Echo, a Go web framework. An attacker can exploit a disagreement in URL path decoding between the router and the static file handler. The router processes raw encoded paths, while the static file handler unescapes encoded forward slashes. This allows an attacker to bypass...
ECHO-8E2D-935C-D158
Bulletin has no description...
ECHO-C915-E406-2ED8
Bulletin has no description...
ECHO-142B-238E-72DA
Bulletin has no description...
ECHO-B37C-7C95-FABF
Bulletin has no description...
ECHO-E362-8D35-27D4
Bulletin has no description...