54259 matches found
PT-2026-72884
Uncontrolled resource consumption vulnerability in Apache Struts. An application that exposes an endpoint collecting Content Security Policy violation reports reads the submitted report into memory without bounding how much it will accept, so a single request can exhaust the heap and deny service...
Linux Distros Unpatched Vulnerability : CVE-2026-72242
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - selinux: avoid sksocket dereference in selinuxsctpbindconnect selinuxsctpbindconnect dereferences sk-sksocket to pass a struct socket to selinuxsocketbind and...
Linux Distros Unpatched Vulnerability : CVE-2026-72118
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: bcm: fix CAN frame rx/tx statistics KCSAN detected a data race within the bcmrxhandler when two CAN frames have been simultaneously received and processed ...
Linux Distros Unpatched Vulnerability : CVE-2026-74566
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - keys: make keyring key-chunk byte order agree with keyringdiffobjects keyringgetkeychunk loads description bytes into the index chunk low address first, while...
PT-2026-72537
In the Linux kernel, the following vulnerability has been resolved: netfilter: xt rateest: fix u64 truncation in xt rateest mt On links faster than 34 Gbps, where byte rate may exceed 2^32-1 4.3 GBps, the comparison result becomes incorrect because the truncated value no longer reflects the actua...
Linux Distros Unpatched Vulnerability : CVE-2026-74356
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vhost: fix vhostgetavailidx for a non empty ring vhostgetavailidx is supposed to report whether it has updated vq-availidx. Instead, it returns whether all...
SUSE CVE-2026-56859
Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...
SUSE CVE-2026-56862
Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely...
MINI-C933-QCR8-QMR4
Bulletin has no description...
CVE-2026-74243
In Red Hat Quay, when SECURITY_SCANNER_V4_PSK is not configured, unauthenticated attackers can flood the notification queue and inject path traversal characters into Clair API URLs, causing worker resource exhaustion and blind path manipulation on the Clair host. Mitigation: set the pre-shared ke...
MINI-FWRF-5JC7-5HHV
Bulletin has no description...
cryprot-net (0.1.0), dbx-core (>=0.2.0-beta, <=0.2.2) +4 more potentially affected by CVE-2026-10740 via s2n-quic (1.37.0)
s2n-quic CARGO version 1.37.0 is affected by a known vulnerability. The following packages have a transitive dependency on s2n-quic and may be impacted: - cryprot-net 0.1.0 - dbx-core =0.2.0-beta, =0.2.0-beta, =0.10.0, =0.1.0, =0.1.0, =0.2.2 Source cves: CVE-2026-10740 Source advisory:...
MINI-76XM-3WQ4-FPXR
Bulletin has no description...
MINI-HV9G-WXQ9-GPQM
Bulletin has no description...
MINI-3C24-73VQ-2H6C
Bulletin has no description...
MINI-W4W4-CF6Q-QVFJ
Bulletin has no description...
CVE-2026-71312 vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-71313 vulnerabilities
Vulnerabilities for packages: telegraf...