MINI-CFRM-3MMP-VWW9

Bulletin has no description...

MINI-66FW-HHCR-C3H3

Bulletin has no description...

MINI-MXXH-J2PP-8VGH

Bulletin has no description...

MINI-85W5-HJ2C-F94G

Bulletin has no description...

CVE-2026-49454

Relyra is a strict-by-default SAML 2.0 Service Provider library for Elixir and Phoenix. Versions 1.0.0 and 1.1.0 accept forged SAML signatures because SignatureValue was not cryptographically verified before the library returned a successful authentication result. The XMLDSig trust boundary was...

MINI-QRC4-QXGR-HGMX

Bulletin has no description...

MINI-QQX2-VRR2-38PG

Bulletin has no description...

MINI-6CQ8-PPPP-94WQ

Bulletin has no description...

MINI-RHWG-MXWM-3HRQ

Bulletin has no description...

MINI-4R4X-G38C-V2P8

Bulletin has no description...

MINI-9G35-C55Q-6PP7

Bulletin has no description...

ECHO-81B6-9726-71C6

Bulletin has no description...

ECHO-D378-1B5A-F13E

Bulletin has no description...

ECHO-3E02-3A01-4AE3

Bulletin has no description...

EUVD-2026-37940

Punto Switcher through 4.5.0.583 contains an unquoted search path element vulnerability that allows local attackers to execute arbitrary code by exploiting the application's call to WinExec without a fully qualified path for RunDll32.exe when invoking shell32.dll ControlRunDLL input.dll. Attacker...

CVE-2026-25865

CVE-2026-25865 affects Punto Switcher 4.5.0.583. The vulnerability is an unquoted search path element invoked via WinExec when calling RunDll32.exe for shell32.dll Control_RunDLL input.dll, enabling local arbitrary code execution if an attacker places a malicious executable earlier in the search ...

DEBIAN-CVE-2026-55392

NILFS utilities through 2.3.0, fixed in commit 26efb5d, nilfssbisvalid function fails to validate slogblocksize field in NILFS2 superblock before bit-shift operations. Attackers supplying crafted NILFS2 images trigger undefined behavior through oversized shifts or out-of-memory conditions, crashi...

DEBIAN-CVE-2026-48937

A flaw in Node.js HTTP/2 server API can cause servers to keep accepting data even after sending a GOAWAY frame. This vulnerability affects two supported release lines: Node.js 22 and Node.js 24...

CGA-JG37-PM8G-67GR

Bulletin has no description...

CGA-4MWV-6XRJ-9CG9

Bulletin has no description...