3354 matches found
CVE-2026-34540
The CVE concerns iccDEV ICC color management libraries. Prior to version 2.3.1.6, a crafted ICC profile can trigger a heap-buffer-overflow in icMemDump() when iccDumpProfile tries to dump/malformed tag contents. The out-of-bounds read is observed under AddressSanitizer in icMemDump(...) at IccPro...
UBUNTU-CVE-2025-59490
Unknown description...
@0xsquid/mpp (>=0.1.1-beta.1 <=0.2.0), @agentmall/mcp (>=0.1.2 <=0.1.3) +86 more potentially affected by unknown CVE via mppx (>=0.1.1 <=0.4.12)
mppx NPM version =0.1.1, =0.1.1-beta.1, =0.1.2, =0.1.1, =0.1.1, =0.22.26, =0.3.0, =4.13.0, =1.0.1, =1.0.1, =1.2.4, =1.0.1, =1.0.1, =1.0.1, =0.2.0, =0.2.1 and more Source cves: unknown CVE Source advisory: SNYK:JS-MPPX-15857153...
BELL-CVE-2026-23378
Bulletin has no description...
GO-2026-4753 Loop Variable Capture Signature Bypass in goxmldsig in github.com/russellhaering/goxmldsig
Loop Variable Capture Signature Bypass in goxmldsig in github.com/russellhaering/goxmldsig...
DEBIAN-CVE-2026-0394
When dovecot has been configured to use per-domain passwd files, and they are placed one path component above /etc, or slash has been added to allowed characters, path traversal can happen if the domain component is directory partial. This allows inadvertently reading /etc/passwd or some other pa...
DEBIAN-CVE-2025-59032
ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response. This can be used to crash ManageSieve service repeatedly, making it unavailable for other users. Control access to ManageSieve port, or disable the service if it's not needed. Alternatively upgrade to a fixed...
DEBIAN-CVE-2026-0967
A flaw was found in libssh. A remote attacker, by controlling client configuration files or knownhosts files, could craft specific hostnames that when processed by the matchpattern function can lead to inefficient regular expression backtracking. This can cause timeouts and resource exhaustion,...
GO-2026-4860 OpenBao lacks user confirmation for OIDC direct callback mode in github.com/openbao/openbao
OpenBao lacks user confirmation for OIDC direct callback mode in github.com/openbao/openbao...
BELL-CVE-2026-32647
Bulletin has no description...
BELL-CVE-2026-23375
Bulletin has no description...
BELL-CVE-2026-23370
Bulletin has no description...
BELL-CVE-2026-23317
Bulletin has no description...
BELL-CVE-2026-1519
Bulletin has no description...
DEBIAN-CVE-2026-23392
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: release flowtable after rcu grace period on error Call synchronizercu after unregistering the hooks from error path, since a hook that already refers to this flowtable can be already registered, exposing this...
DEBIAN-CVE-2026-23384
In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: Fix kernel stack leak in ioniccreatecq struct ioniccqresp resp u32 cqid2; // offset 0 - PARTIALLY SET see below u8 udmamask; // offset 8 - SET resp.udmamask = vcq-udmamask u8 rsvd7; // offset 9 - NEVER SET udmamask &...
DEBIAN-CVE-2026-23364
In the Linux kernel, the following vulnerability has been resolved: ksmbd: Compare MACs in constant time To prevent timing attacks, MAC comparisons need to be constant-time. Replace the memcmp with the correct function, cryptomemneq...
DEBIAN-CVE-2026-23348
In the Linux kernel, the following vulnerability has been resolved: cxl: Fix race of nvdimmbus object when creating nvdimm objects Found issue during running of cxl-translate.sh unit test. Adding a 3s sleep right before the test seems to make the issue reproduce fairly consistently. The...
DEBIAN-CVE-2026-23333
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetrbtree: validate open interval overlap Open intervals do not have an end element, in particular an open interval at the end of the set is hard to validate because of it is lacking the end element, and interval...