235 matches found
MINI-JV49-7998-F4CF
Bulletin has no description...
BELL-CVE-2026-64590
Bulletin has no description...
MINI-XCFM-57F5-PR5R
Bulletin has no description...
DEBIAN-CVE-2026-67339
guzzlehttp/guzzle versions before 7.14.2 fail to properly isolate Proxy-Authorization headers from origin servers in cURL handlers. Attackers can capture proxy credentials through origin server access logs when requests are redirected, bypassed, or sent through SOCKS proxies that Guzzle...
DEBIAN-CVE-2026-67314
axios versions =1.15.2 and 1.18.0 contain prototype-pollution read-side gadgets in Basic auth subfield handling lib/adapters/http.js and lib/helpers/resolveConfig.js. When an application is already affected by a separate prototype-pollution primitive and makes an axios request with an own auth...
DEBIAN-CVE-2026-9672
Bulletin has no description...
DEBIAN-CVE-2026-58039
A flaw in Node.js Permission Model enforcement allows process.report writes and overwrites files outside --allow-fs-write paths. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js 22.x, 24.x, and 26...
ECHO-789B-04F9-51D1
Bulletin has no description...
MINI-P4HR-XCW2-3VF2
Bulletin has no description...
BELL-CVE-2026-64386
Bulletin has no description...
BELL-CVE-2026-64539
Bulletin has no description...
BELL-CVE-2026-64217
Bulletin has no description...
MINI-VH77-XCCW-8J73
Bulletin has no description...
MINI-P8J7-PF7R-836G
Bulletin has no description...
DEBIAN-CVE-2026-64393
In the Linux kernel, the following vulnerability has been resolved: ksmbd: run set info with opener credentials SMB2 SETINFO handlers call path-based VFS helpers after checking the access mask granted to the SMB handle. Those helpers perform their owner, inode permission and LSM checks using the...
DEBIAN-CVE-2026-64288
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Avoid dereferencing NULL VNCR pseudo-TLB VNCR TLB invalidation occurs from MMU notifiers or TLBI instructions, and either can race against a vcpu not being onlined yet no pseudo-TLB allocated. Similarly, the TLB...
DEBIAN-CVE-2026-64279
In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter deregistration race Adapters can be looked up by their id using i2cgetadapter which takes a reference to the embedded struct device. Remove the adapter from the IDR before tearing it down during...
DEBIAN-CVE-2026-65904
DOMPurify through 3.3.3 fails to sanitize DOM elements passed via INPLACE mode when the element originates from a different window/realm e.g., an iframe's contentDocument. A cross-realm instanceof check in the private isNode function returns false for foreign-realm nodes, causing DOMPurify to...