136 matches found
DEBIAN-CVE-2026-41054
In src/havegecmd.c, the sockethandler function performs a credential check on the abstract UNIX socket \0/sys/entropy/haveged. However, while it detects if the connecting user is not root cred.uid != 0 and prepares a negative acknowledgement ASCIINAK, it fails to stop execution. The code proceeds...
Malicious code in @serviceshub/x-web-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1cd81c2623e8f621801dcbfbf7d7eb8745bf702f1d5e85e410872400c7d2eea7 Package ships a trivial index.js module.exports = ; and exists solely to pull a direct-URL tarball dependency at install time. package.json line 9...
DEBIAN-CVE-2026-8950
Same-origin policy bypass in the Networking: HTTP component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11...
MINI-3CGH-3Q2R-X8P3
Bulletin has no description...
MINI-PPPM-M34F-WWH9
Bulletin has no description...
MINI-MQP3-46F9-7P37
Bulletin has no description...
RHSA-2026:16875 Red Hat Security Advisory: git-lfs security update
Bulletin has no description...
MINI-927X-FH9W-PPFM
Bulletin has no description...
MINI-HXG3-H86J-VFP7
Bulletin has no description...
MINI-26MX-G95G-8WPH
Bulletin has no description...
MINI-55G4-V8WX-J339
Bulletin has no description...
MINI-JFH7-XHCM-5RGJ
Bulletin has no description...
BELL-CVE-2026-43256
Bulletin has no description...
BELL-CVE-2026-43154
Bulletin has no description...
BELL-CVE-2026-43394
Bulletin has no description...
DEBIAN-CVE-2025-71297
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: 8822b: Avoid WARNING in rtw8822bconfigtrxmode rtw8822bsetantenna can be called from userspace when the chip is powered off. In that case a WARNING is triggered in rtw8822bconfigtrxmode because trying to read the RF...
BELL-CVE-2026-43123
Bulletin has no description...
DEBIAN-CVE-2026-43173
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: xscale: Check for PTP support properly In ixp4xxgettsinfo ixp46xptpfind is called unconditionally despite this feature only existing on ixp46x, leading to the following splat from tcpdump: root@OpenWrt: tcpdump -vv...
DEBIAN-CVE-2026-43085
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlinklog: initialize nfgenmsg in NLMSGDONE terminator When batching multiple NFLOG messages inst-qlen 1, nfulnlsend appends an NLMSGDONE terminator with sizeofstruct nfgenmsg payload via nlmsgput, but never...