ECHO-B1ED-9648-8B21 Kernel vulnerabilities are irrelevant in container environments.

Bulletin has no description...

ghc-crypton-x509-system-1.9.0-1.1 on GA media (moderate)

ghc-crypton-x509-system-1.9.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11084-1 Rating: moderate Cross-References: CVE-2026-9648 CVSS scores: CVE-2026-9648 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerabilit...

ghc-crypton-asn1-parse-0.10.0-1.1 on GA media (moderate)

ghc-crypton-asn1-parse-0.10.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11079-1 Rating: moderate Cross-References: CVE-2026-9648 CVSS scores: CVE-2026-9648 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerabilit...

ghc-crypton-pem-0.3.0-1.1 on GA media (moderate)

ghc-crypton-pem-0.3.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11081-1 Rating: moderate Cross-References: CVE-2026-9648 CVSS scores: CVE-2026-9648 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can no...

ghc-crypton-asn1-types-0.4.1-1.1 on GA media (moderate)

ghc-crypton-asn1-types-0.4.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11080-1 Rating: moderate Cross-References: CVE-2026-9648 CVSS scores: CVE-2026-9648 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability...

ghc-crypton-asn1-encoding-0.10.0-1.1 on GA media (moderate)

ghc-crypton-asn1-encoding-0.10.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11078-1 Rating: moderate Cross-References: CVE-2026-9648 CVSS scores: CVE-2026-9648 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Tumbleweed An update that solves one...

ghc-aws-0.25.2-1.1 on GA media (moderate)

ghc-aws-0.25.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:11077-1 Rating: moderate Cross-References: CVE-2026-9648 CVSS scores: CVE-2026-9648 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...

CVE-2026-9648

creationtimestamp| type| source ---|---|--- 2026-06-11 16:53:27+00:00| seen| https://bsky.app/profile/drweb2.bsky.social/post/3mnzotj3lap23 2026-06-11 17:44:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnzro3zxu52w...

DEBIAN-CVE-2026-9648

The crypton-x509-validation Haskell library fails to enforce X.509 NameConstraints, allowing TLS clients to accept certificates whose Subject Alternative Names fall outside the issuing CA’s permitted subtrees. This oversight enables an attacker who compromises a name-constrained sub-CA to...

CVE-2026-9648

The crypton-x509-validation Haskell library fails to enforce X.509 NameConstraints, allowing TLS clients to accept certificates whose Subject Alternative Names fall outside the issuing CA’s permitted subtrees. This oversight enables an attacker who compromises a name-constrained sub-CA to...

MINI-9648-JPF9-FG5Q

Bulletin has no description...

MINI-6H7G-G2C7-9648

Bulletin has no description...

Fedora: Security Advisory (FEDORA-2025-1056ea31ed)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-247b5416b4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EUVD-2020-3332

Malware in sbrugna...

DEBIAN-CVE-2025-9648

A vulnerability in the CivetWeb library's function mghandleformrequest allows remote attackers to trigger a denial of service DoS condition. By sending a specially crafted HTTP POST request containing a null byte in the payload, the server enters an infinite loop during form data parsing. Multipl...

CVE-2025-9648

A vulnerability in the CivetWeb library's function mghandleformrequest allows remote attackers to trigger a denial of service DoS condition. By sending a specially crafted HTTP POST request containing a null byte in the payload, the server enters an infinite loop during form data parsing. Multipl...

CVE-2020-9648

Adobe Experience Manager versions 6.5 and earlier have a cross-site scripting vulnerability. Successful exploitation could lead to arbitrary javascript execution in the browser...

Design/Logic Flaw

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700 V1.0.4.8410.0.58 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of firmware updates. The issue results fro...

CVE-2020-10926

The CVE-2020-10926 issue affects NETGEAR R6700 routers running firmware version 1.0.4.84_10.0.58. The root cause is improper validation of the firmware image before performing an update, enabling a network-adjacent attacker (no authentication required) to execute arbitrary code in the router cont...