bash-4.3-fixed-CVE-2014-6271

소개 이것은 GNU Bash, 버전 4.3입니다. Bash는 GNU 프로젝트의 Bourne Again SHell로, POSIX 셸 사양의 완전한 구현체이며, 대화형 명령줄 편집, 이를 지원하는 아키텍처에서의 작업 제어job control, 히스토리 치환과 중괄호 확장 같은 csh 유사 기능, 그리고 그 밖의 수많은 기능을 제공합니다. 이 유형의 셸에 새로 도입된 Bash 기능에 대한 자세한 내용은 doc/bashref.texi' 파일을 참조하십시오. 또한 방대한 분량의 Unix 스타일 매뉴얼 페이지도 있습니다. 매뉴얼 페이지는...

CLSA-2026-1785921265 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 21 org.springframework packages to address 1 CVE. Fixed in 4.3.30.RELEASE-tuxcare.4...

CVE-2026-18587

CVE-2026-18587 affects Wavlink WL-NU516U1 (708c073-mt7628). The flaw is in an unknown function of Config Import where manipulating the Password argument can trigger an OS command injection. The issue is exploitable remotely with high impact to confidentiality, integrity, and availability (C/I/A: ...

CVE-2026-48145 affecting package thrift for versions less than 0.24.0-1

CVE-2026-48145 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-28911

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.8.8, macOS Tahoe 26.6. A malicious app may be able to corrupt memory of a system process...

CVE-2026-15392 affecting package perl-DBI for versions less than 1.651-1

CVE-2026-15392 affecting package perl-DBI for versions less than 1.651-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-59897 Hono: API Gateway v1 adapter can drop a distinct repeated request header value during de-duplication

Hono is a Web application framework that provides support for any JavaScript runtime. From 4.3.3 before 4.12.27, the AWS API Gateway v1 adapter can drop a distinct repeated request header value because it de-duplicates values using a substring comparison instead of an exact match, so middleware o...

CVE-2026-46320 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-46320 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-55092

Trivy is a security scanner. Prior to 0.71.1, when Trivy downloads an OCI artifact, it uses the org.opencontainers.image.title annotation from the artifact manifest as the destination filename without validation. An attacker who can make Trivy fetch an attacker-controlled artifact can supply a...

CVE-2026-48721

Warp is an agentic development environment. From 0.2025.10.08.08.12.stable00 until 0.2026.05.06.15.42.stable01, Warp contains a command execution permission-check bypass in the default unsandboxed CLI agent profile. The CLI profile is non-interactive and relies on a command denylist as a safety...

CVE-2026-46069 affecting package kernel for versions less than 6.6.141.1-1

CVE-2026-46069 affecting package kernel for versions less than 6.6.141.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-45836 affecting package kernel for versions less than 6.6.141.1-1

CVE-2026-45836 affecting package kernel for versions less than 6.6.141.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-46146 affecting package kernel for versions less than 6.6.141.1-1

CVE-2026-46146 affecting package kernel for versions less than 6.6.141.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-46163 affecting package kernel for versions less than 6.6.141.1-1

CVE-2026-46163 affecting package kernel for versions less than 6.6.141.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-46091 affecting package kernel for versions less than 6.6.141.1-1

CVE-2026-46091 affecting package kernel for versions less than 6.6.141.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-49121

A flaw was found in AI Tensor Engine for ROCm AITER. This vulnerability allows unauthenticated remote attackers to execute arbitrary code by sending a specially crafted data package, known as a pickle payload, to a ZeroMQ ZMQ subscriber socket. This exploitation is possible due to a lack of...

PT-2026-55980

Name of the Vulnerable Software and Affected Versions Hugo versions 0.123.0 through 0.163.0 Description A regression in the virtual filesystem allows a symlink placed within a theme or local mount to read arbitrary files accessible to the user running the application. This occurs because the...

CVE-2026-42789 affecting package erlang for versions less than 26.2.5.21-1

CVE-2026-42789 affecting package erlang for versions less than 26.2.5.21-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-46486

MVT Mobile Verification Toolkit helps with conducting forensics of mobile devices in order to find signs of a potential compromise. Prior to version 2026.5.12, there is a path traversal vulnerability via unsanitized File identifiers in iOS Backup processing. This issue has been patched in version...

CVE-2026-0899 affecting package nodejs for versions less than 24.14.1-3

CVE-2026-0899 affecting package nodejs for versions less than 24.14.1-3. An upgraded version of the package is available that resolves this issue...