5380 matches found
ECHO-79D4-B3D1-2520
Bulletin has no description...
ECHO-1353-FD70-BD79
Bulletin has no description...
ECHO-C210-992E-640A
Bulletin has no description...
ECHO-37EC-7E98-5F4F
Bulletin has no description...
ECHO-9D99-9ED1-60B7
Bulletin has no description...
ECHO-DB00-4309-1170
Bulletin has no description...
ECHO-F836-71CF-434B
Bulletin has no description...
github.com/labstack/echo: Echo: Unauthorized Information Disclosure via URL Path Decoding Discrepancy
A flaw was found in Echo, a Go web framework. An attacker can exploit a disagreement in URL path decoding between the router and the static file handler. The router processes raw encoded paths, while the static file handler unescapes encoded forward slashes. This allows an attacker to bypass...
ECHO-8A36-8D53-BF0C
Bulletin has no description...
ECHO-EF47-70D2-ABED
Bulletin has no description...
ECHO-38C1-1304-759B
Bulletin has no description...
ECHO-E7FA-7050-0A91
Bulletin has no description...
ECHO-02EA-72A4-FE7A
Bulletin has no description...
ECHO-9151-32E7-325F
Bulletin has no description...
ECHO-29A6-7992-DF6D
Bulletin has no description...
PT-2026-77235
MagicMirror² is an open source modular smart mirror platform. Prior to 2.37.0, when hideConfigSecrets is enabled, the catch-all socket dispatcher in js/node helper.js passes every inbound object payload through replaceSecretPlaceholder in js/server functions.js before invoking...
UBUNTU-CVE-2026-72398
In the Linux kernel, the following vulnerability has been resolved: sctp: add INIT verification after cookie unpacking In SCTP handshake, the INIT chunk is initially processed by the server and embedded into the cookie carried in INIT-ACK. The client then returns this cookie via COOKIE-ECHO, wher...
CVE-2026-72398 sctp: add INIT verification after cookie unpacking
In the Linux kernel, the following vulnerability has been resolved: sctp: add INIT verification after cookie unpacking In SCTP handshake, the INIT chunk is initially processed by the server and embedded into the cookie carried in INIT-ACK. The client then returns this cookie via COOKIE-ECHO, wher...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: kubernetes-event-exporter, crossplane-provider-aws-lambda, aws-eks-pod-identity-agent, external-dns, undock, crossplane-provider-aws-s3, cri-tools, litestream, mesosphere-vsphere-csi, crossplane-provider-aws-cloudwatchlogs, eksctl, dask-gateway, gptscript,...