9287 matches found
DEBIAN-CVE-2026-11771
OpenVPN version 2.1.0 through 2.6.20 and 2.7alpha1 through 2.7.4 allows attackers via an off-by-one buffer write in the NTLM proxy authentication to potentially cause a crash via a crafted NTLM response from a malicious proxy server...
DEBIAN-CVE-2026-58222
A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller AD DC. When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search ...
DEBIAN-CVE-2026-17543
Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2. before 8.2.33, from 8.3. before 8.3.33, from 8.4. before 8.4.24, and from 8.5. before 8.5.9...
RHSA-2026:48034 Red Hat Security Advisory: nodejs24 security update
Bulletin has no description...
CGA-8MF6-WJX6-FGJX
Bulletin has no description...
MINI-P99P-HPRM-C6WX
Bulletin has no description...
MINI-8GFC-FWHG-6R7P
Bulletin has no description...
MINI-RHV7-XRG3-2562
Bulletin has no description...
DEBIAN-CVE-2026-16530
A flaw was found in the PCP Performance Co-Pilot pmproxy service. A remote attacker can exploit a vulnerability in the pmLogLoadInDom function by sending a specially crafted request. This bypasses a critical bounds check, which can lead to the pmproxy service crashing, causing a Denial of Service...
MINI-MQWR-V69H-XVP6
Bulletin has no description...
DEBIAN-CVE-2026-5056
GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...
MINI-P3PV-5FVG-G24F
Bulletin has no description...
MINI-GHM2-8X27-8VJX
Bulletin has no description...
MINI-CJJ5-5F5C-RPHH
Bulletin has no description...
DEBIAN-CVE-2026-59900
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, Netty's HTTP/2-to-HTTP/1.x translation layer Http2StreamFrameToHttpObjectCodec and InboundHttp2ToHttpAdapter fails to deduplicate or validate Host headers when an HTTP/2 client...
DEBIAN-CVE-2026-67194
Courier IMAP before 6.0.1 and Courier Mail Server before 2.0.2 allow authenticated IMAP users to crash the imapd process via deeply nested parenthesized SEARCH queries. The SEARCH command parser allocsearchkey in searchinfo.C recursively descends on nested parenthesized groups through a mutual...
MINI-PH48-785J-388J
Bulletin has no description...
MINI-V838-P287-8CPG
Bulletin has no description...