6485 matches found
MINI-QMM3-J99W-H34X
Bulletin has no description...
DEBIAN-CVE-2026-67322
GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clonefrom. The caller-supplied remote URL is passed through Git.polishurl, which on non-Cygwin platforms calls os.path.expandvars on the URL before invoking git clone. An attacker who controls the clone URL can emb...
DEBIAN-CVE-2026-67312
axios versions from 0.28.0 before 0.33.0 and from 1.0.0 before 1.18.0 contain uncontrolled recursion in formDataToJSON exposed as axios.formToJSON and used internally when serializing FormData with Content-Type: application/json. When an application passes attacker-controlled FormData field names...
DEBIAN-CVE-2026-67306
FreeRDP versions 3.28.0 and earlier contain an out-of-bounds read vulnerability in the RDP6 planar RLE bitmap decoder functions planardecompressplanerle and planardecompressplanerleonly in libfreerdp/codec/planar.c. Only the 1-byte control byte is bounds-checked; the subsequent 0–15...
DEBIAN-CVE-2026-67296
FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to validate maximum PDU body length before stream allocation. A malicious RDP client can send a header-only RDPEI message with a large declared body length to force excessive memory...
DEBIAN-CVE-2026-67297
FreeRDP before 3.29.0 fails to enforce the RESPONSESIZELIMIT when processing Transfer-Encoding: chunked HTTP responses in httpresponserecvbody. Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering th...
RHSA-2026:48790 Red Hat Security Advisory: osbuild-composer security update
Bulletin has no description...
RHSA-2026:48760 Red Hat Security Advisory: python-pillow security update
Bulletin has no description...
RHSA-2026:48650 Red Hat Security Advisory: vim security update
Bulletin has no description...
MINI-X9QC-29W9-WQQ8
Bulletin has no description...
BELL-CVE-2026-7260
Bulletin has no description...
MINI-MQ6X-H73J-CMX3
Bulletin has no description...
MINI-65VQ-57QJ-GHR8
Bulletin has no description...
MINI-P877-5QVV-PM25
Bulletin has no description...
DEBIAN-CVE-2026-18446
fast-uri before 4.1.2, 3.1.5, and 2.4.4 requires a literal double forward slash to recognize a URI authority, so a reference that uses a backslash based introducer in place of it backslash backslash, forward slash backslash, or backslash forward slash is parsed with no authority and folds into th...
MINI-566P-HV4H-36C2
Bulletin has no description...
MINI-P67F-JQMW-8PXV
Bulletin has no description...
MINI-R3R3-5H8Q-M53X
Bulletin has no description...