62164 matches found
CVE-2026-48092
7-Zip is a file archiver with a high compression ratio. Versions 9.34 through 26.00 contain a heap memory disclosure via SquashFS fragment offset integer overflow on 32-bit builds. 32-bit integer overflow in the SquashFS ReadBlock function allows an attacker-controlled node.Offset value to bypass...
CVE-2026-9270 DataDog::DogStatsd versions through 0.07 for Perl allow metric injections
DataDog::DogStatsd versions through 0.07 for Perl allow metric injections. DataDog::DogStatsd does not properly sanitise input, allowing metric injections of data from untrusted sources. The sendstats method does not remove newlines from metric names $stat variable, allowing attackers to change t...
CVE-2026-9270
The DataDog::DogStatsd Perl module, versions through 0.07 , is vulnerable to metric injections due to insufficient input sanitization. The send_stats method fails to remove newlines from metric names (the $stat variable), enabling attackers to manipulate metric name prefixes. Additionally, it doe...
Chromium: CVE-2026-11062 Insufficient policy enforcement in Extensions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
MINI-G4XR-278M-F8V3
Bulletin has no description...
MINI-X3RG-46VJ-3RJG
Bulletin has no description...
MINI-22MC-FGMX-PWPF
Bulletin has no description...
MINI-WXFW-G3JH-MW29
Bulletin has no description...
Security update for mariadb
This update for mariadb fixes the following issues: CVE-2026-3494: audit plugin comment handling bypass bsc1259176. CVE-2026-34303: mysql: optimizer unspecified vulnerability bsc1266435. CVE-2026-44168: wsrep SST unsafe parameter handling on the donor side bsc1266442. CVE-2026-44170: argument...
RLSA-2026:22649 Important: php8.4 security update
PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...
MINI-C4MW-FG89-P234
Bulletin has no description...
MINI-VXQ3-F99X-F6MM
Bulletin has no description...
MINI-4R5X-FJ47-XF67
Bulletin has no description...
MINI-VH6X-PQ67-594F
Bulletin has no description...
MINI-5F4V-W729-444C
Bulletin has no description...
MINI-QW3Q-X2PH-C22W
Bulletin has no description...
MINI-WM65-89V5-QG3P
Bulletin has no description...
BIT-MLFLOW-2026-4035 Environment Variable Resolution Vulnerability in mlflow/mlflow
A vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment variables in AI Gateway secrets, which can be exploited to exfiltrate sensitive server-side environment credentials to an attacker-controlled endpoint. This issue arises because the apikey field in...