1253595 matches found
DEBIAN-CVE-2026-68368
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fncm: validate datagram bounds in ncmunwrapntb When unpacking host-supplied NTBs, ncmunwrapntb checks datagram length against framemax but does not verify that the datagram fits within the declared block length...
CVE-2026-59900
creationtimestamp| type| source ---|---|--- 2026-08-10 13:20:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msq6vheark2o 2026-08-13 08:45:17+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0991...
UBUNTU-CVE-2026-68255
In the Linux kernel, the following vulnerability has been resolved: drm/virtio: bound EDID block reads to the response buffer virtiogetedidblock validates the read offset only against the device-supplied resp-size field, never against the fixed-size resp-edid array. The EDID block index is driven...
CVE-2026-68368
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fncm: validate datagram bounds in ncmunwrapntb When unpacking host-supplied NTBs, ncmunwrapntb checks datagram length against framemax but does not verify that the datagram fits within the declared block length...
CVE-2026-68119
In the Linux kernel, the following vulnerability has been resolved: tcp: initialize standalone TCP-AO response padding tcpv4sendack and tcpv6sendresponse construct standalone TCP responses with TCP-AO options. The option length carries the actual MAC length, but the TCP header length includes the...
OPENSUSE-SU-2026:21558-1 Security update for gitoxide
This update for gitoxide fixes the following issues: Changes in gitoxide: - Update to 0.56.0: Fixes CVE-2026-40034 boo1266434: the CommandForbiddenInModules trust check could be bypassed in gixsubmodule::File::update, which allowed arbitrary command execution from a crafted .gitmodules file Fixes...
SUSE-SU-2026:3542-1 Security update for ffmpeg-4
This update for ffmpeg-4 fixes the following issues: Update to release 4.4.8. - CVE-2026-8461: out-of-bounds write in the MagicYUV decoder can lead to denial of service or remote code execution bsc1269490. - CVE-2026-12706: heap use-after-free read in the RASC video decoder can lead to denial of...
SUSE-SU-2026:3541-1 Security update for libssh2_org
This update for libssh2org fixes the following issues: - CVE-2025-15661: out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c bsc1268546. - CVE-2026-7598: integer overflow in function userauthpassword of file src/userauth.c bsc1263890. - CVE-2026-58050: heap buffer...
FFmpeg: FFmpeg: Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files
A flaw was found in FFmpeg. A remote attacker could exploit an out-of-bounds memory access vulnerability in the ADX audio decoder by supplying a specially crafted ADX or AAX audio file. This could lead to the attacker triggering both out-of-bounds reads and writes, potentially resulting in...
FFmpeg: FFmpeg: Arbitrary code execution, information disclosure, or denial of service via crafted ADX/AAX audio files
A flaw was found in FFmpeg. A remote attacker could exploit an out-of-bounds memory access vulnerability in the ADX audio decoder by supplying a specially crafted ADX or AAX audio file. This could lead to the attacker triggering both out-of-bounds reads and writes, potentially resulting in...
CVE-2026-56847
A flaw in the Node.js Permission Model allows traceevents.createTracing.enable to bypass --allow-fs-write restrictions and write trace logs outside intended paths, potentially leading to unauthorized information disclosure. Mitigation Avoid using the traceevents.createTracing.enable function in...
CVE-2026-72581
creationtimestamp| type| source ---|---|--- 2026-08-10 12:04:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fg6gdf2cjbu76 2026-08-10 15:01:48+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msqel3mkyb22 2026-08-10 15:03:02+00:00| seen|...
CVE-2026-68421
In the Linux kernel, the following vulnerability has been resolved: schedext: Don't warn on core-sched forced idle in putprevtaskscx putprevtaskscx warns when a runnable task drops to a lower schedclass without SCXOPSENQLAST, on the assumption that balanceone would have kept it running. Core...
CVE-2026-68368 usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb()
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fncm: validate datagram bounds in ncmunwrapntb When unpacking host-supplied NTBs, ncmunwrapntb checks datagram length against framemax but does not verify that the datagram fits within the declared block length...
CVE-2026-72688 OpenSignLabs opensignserver - Missing Authentication for Critical Function
A missing authentication vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to read arbitrary stored documents via the fileupload Parse cloud function. The function mints MASTERKEY-signed file access tokens for any caller-supplied URL without...
[SECURITY] [DSA 6426-1] icinga2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6426-1 [email protected] https://www.debian.org/security/ Sebastiaan Couwenberg August 10, 2026 https://www.debian.org/security/faq -...
CVE-2026-72593
creationtimestamp| type| source ---|---|--- 2026-08-10 11:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mspzn3mfm62d...
CVE-2026-72592
creationtimestamp| type| source ---|---|--- 2026-08-10 11:44:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mspzjkirgl26 2026-08-10 12:16:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ga5shuzi2pgvm...
[SECURITY] [DSA 6425-1] openjdk-21 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6425-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 10, 2026 https://www.debian.org/security/faq -...
