11819 matches found
DEBIAN-CVE-2026-61722
FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS parser validates articulation chunks using the unsigned expression cbsize + connblocks 12 without first ensuring that the multiplication and addition fit in 32 bits. A crafted DLS...
DEBIAN-CVE-2023-24287
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the "M" command...
DEBIAN-CVE-2026-44950
fsreadglyphs in the libXfont2 font-server client src/fc/fserve.c copies each glyph's bitmap into a single buffer. Existing checks validates only that the source slice position, length lies within the source bitmap buffer. It does not check whether the running destination cursor has exceeded the...
DEBIAN-CVE-2026-59679
fsreadglyphs in the libXfont2 font-server client src/fc/fserve.c indexes the per-character encoding array using numchars from the FSQueryXBitmaps16 reply, but that array was allocated with a size derived from numextents in the separate FSQueryXExtents16 reply. The two CARD32 fields are never...
MINI-62RW-GWG3-RH5C
Bulletin has no description...
MINI-FXQ6-4595-W39C
Bulletin has no description...
DEBIAN-CVE-2026-50190
Shaarli is a personal bookmarking service. Versions prior to 0.16.3 are vulnerable to stored XSS in application/front/controller/visitor/BookmarkListController.php. The permalink handler concatenates the raw $bookmark-getTitle into the pagetitle template variable and the RainTPL template emits it...
MINI-6G2F-H297-6J9J
Bulletin has no description...
MINI-F9MV-FWM9-4HWQ
Bulletin has no description...
MINI-MM5V-5H2J-5V9X
Bulletin has no description...
MINI-3QW3-8QVC-27X8
Bulletin has no description...
MINI-XV52-4HMM-3F5V
Bulletin has no description...
MINI-4PVP-XGQC-44PC
Bulletin has no description...
CVE-2026-70463
rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing. The auth users parser uses comma-only tokenization when splitting the user list, which fails to correctly handle entries of the form @Group Name where the group name contains a space. The space within the...
CVE-2026-70458
rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory by triggering HLINKBUMP processing on file entries with the FLAGHLINKED flag set while the hard-link preservation option is inactive. Attackers can exploit the missing FSUM field in the...
RHSA-2026:52396 Red Hat Security Advisory: postgresql:12 security update
Bulletin has no description...
RHSA-2026:52395 Red Hat Security Advisory: postgresql security update
Bulletin has no description...
MINI-MMF7-9H8R-PPV8
Bulletin has no description...