52761 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-74531
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: hciconn: hold conn reference in abortconnsync There is theoretical UAF if the conn is freed while the hcisync task is running. Hold refcount to avoid...
Linux Distros Unpatched Vulnerability : CVE-2026-74545
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rtase: fix double free of multi-frag skb on DMA map failure In rtasestartxmit, when the head buffer DMA mapping fails after rtasexmitfrags has mapped all...
PT-2026-72330
In the Linux kernel, the following vulnerability has been resolved: i2c: imx: fix locked bus on SMBus block-read of 0 atomic SMBus 3.1 6.5.7 allows a Block Read byte count of 0, but the atomic polling path rejects it as -EPROTO. Worse, it returns without a NACK+STOP: the next receive cycle has...
Linux Distros Unpatched Vulnerability : CVE-2026-74566
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - keys: make keyring key-chunk byte order agree with keyringdiffobjects keyringgetkeychunk loads description bytes into the index chunk low address first, while...
PT-2026-72884
Uncontrolled resource consumption vulnerability in Apache Struts. An application that exposes an endpoint collecting Content Security Policy violation reports reads the submitted report into memory without bounding how much it will accept, so a single request can exhaust the heap and deny service...
SUSE CVE-2026-56859
Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...
SUSE CVE-2026-56862
Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely...
MINI-C933-QCR8-QMR4
Bulletin has no description...
CVE-2026-74243
In Red Hat Quay, when SECURITY_SCANNER_V4_PSK is not configured, unauthenticated attackers can flood the notification queue and inject path traversal characters into Clair API URLs, causing worker resource exhaustion and blind path manipulation on the Clair host. Mitigation: set the pre-shared ke...
MINI-FWRF-5JC7-5HHV
Bulletin has no description...
MINI-76XM-3WQ4-FPXR
Bulletin has no description...
MINI-HV9G-WXQ9-GPQM
Bulletin has no description...
MINI-3C24-73VQ-2H6C
Bulletin has no description...
MINI-W4W4-CF6Q-QVFJ
Bulletin has no description...
CVE-2026-71313 vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-71312 vulnerabilities
Vulnerabilities for packages: telegraf...
GHSA-GX4C-2HQX-CW2R vulnerabilities
Vulnerabilities for packages: telegraf...
MINI-JJC2-4QF3-W2J6
Bulletin has no description...