5444 matches found
DEBIAN-CVE-2026-65904
DOMPurify through 3.3.3 fails to sanitize DOM elements passed via INPLACE mode when the element originates from a different window/realm e.g., an iframe's contentDocument. A cross-realm instanceof check in the private isNode function returns false for foreign-realm nodes, causing DOMPurify to...
MINI-C8H8-WHV8-5RF4
Bulletin has no description...
MINI-WM68-X3V4-HWFG
Bulletin has no description...
RHSA-2026:44271 Red Hat Security Advisory: dogtag-pki security update
Bulletin has no description...
RHSA-2026:42887 Red Hat Security Advisory: java-17-openjdk security update
Bulletin has no description...
RHSA-2026:41937 Red Hat Security Advisory: sssd security update
Bulletin has no description...
RHSA-2026:41901 Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update
Bulletin has no description...
CGA-JR3W-878M-GP2C
Bulletin has no description...
MINI-WC69-6W2G-PVMR
Bulletin has no description...
MINI-5GW5-84MP-X83M
Bulletin has no description...
MINI-95V7-X446-9G2V
Bulletin has no description...
MINI-935V-PFPV-FV3C
Bulletin has no description...
DEBIAN-CVE-2026-48029
libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.19.0 through 1.21.2 have a heap OOB read in ImageItemGrid::decodegridtile via irot-induced tile-coordinate underflow. Version 1.22.0 fixes the issue...
DEBIAN-CVE-2026-11331
An attacker who knows or guesses that a resolver uses RPZ with wildcard CNAME policies can craft query names long enough to trigger a NAMETOOLONG error condition during RPZ processing. This is not handled correctly and may lead to defeating the RPZ rule. It also may lead to an unexpected exit of...
DEBIAN-CVE-2026-11605
The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records in an answer, even if they are not strictly needed. A query to an authoritative server/zone which returns many valid but superfluous RRSIG records causes the validator to...
DEBIAN-CVE-2026-11622
A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the...
MINI-HR2X-FFM6-WWR7
Bulletin has no description...
MINI-G742-VG4Q-J83R
Bulletin has no description...