46769 matches found
CVE-2026-19954
Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...
CVE-2026-19954 Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names
Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...
CVE-2026-19954
The Net::Whois::Raw library for Perl (versions before 2.99044 ) contains a flaw in its pwhois command-line tool. The tool fails to correctly query WHOIS for unicode domain names because it skips essential IDNA mapping and normalization steps, directly using Net::IDN::Punycode . This results in in...
CVE-2026-19954
Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...
Malicious code in ultimate-websocket (npm)
Source: amazon-inspector 7574e423b830695141ee6e089006e0c355109e240c69881512806869cfee8114 package.json declares its only dependency node-net-pool as a bare tarball URL pointing at the mutable main branch of an unrelated GitHub user...
K000163534: Ruby vulnerabilities CVE-2026-42245, CVE-2026-42246, CVE-2026-42257
Security Advisory Description CVE-2026-42245 Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, Net::IMAP::ResponseReader has quadratic time complexity when reading large responses containing many string literals. ...
CVE-2026-37719
The dormakaba evolo Service (all versions) is vulnerable to a remote code execution (RCE) flaw. A remote attacker can exploit a .NET component to execute arbitrary code with SYSTEM privileges. The vulnerability is associated with CWE-502 (Deserialization of Untrusted Data). No specific exploitati...
ROS-20261005-73-0123
The vulnerability of the fib6nhinit function in the net/ipv6/route.c module of the Linux operating system’s IPv6 kernel implementation is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20261005-73-0119
The vulnerability of the routeshortcircuit function in the drivers/net/vxlan/vxlancore.c file of the Linux kernel network device driver is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a system failure...
kernel security, bug fix, and enhancement update
6.12.0-211.62.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
ROS-20261005-73-0114
The vulnerability of the net/can/bcm.c component in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
Oracle Linux 8 : kernel (ELSA-2026-74133)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-74133 advisory. - dm-integrity: don't increment hashoffset twice CKI Backport Bot RHEL-257757 CVE-2026-72099 - net/liquidio: drop cached VF pcidev LUT Izabela Bakolla...
AlmaLinux 9.2 [TuxCare] Security Update: ruby / ruby-default-gems / ruby-devel / ruby-doc / ruby-libs / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791199760)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791199760 advisory. - Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and...
CVE-2026-19954
Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...
CVE-2026-19954: Improper Handling of Unicode Encoding
Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...
ROS-20261005-73-0122
The vulnerability of the ucanreadbulkcallback function in the drivers/net/can/usb/ucan.c file of the Linux network device driver framework leads to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause service failures...
ROS-20261005-73-0131
The vulnerability of the emsusbreadbulkcallback function in the drivers/net/can/usb/emsusb.c module of the Linux network device driver framework is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failur...
ROS-20261005-73-0106
The vulnerability of the lecarpclearvccs function in the net/atm/lec.c module, which is part of the networking functions in the Linux kernel, relates to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2026-37719
An issue in dormakaba evolo Service all versions allows a remote attacker to execute arbitrary code as SYSTEM via a .NET component...
ALSA-2026:75576 Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: net: mana: Fix TOCTOU double-fetch of hwcmsgid from DMA buffer CVE-2026-64034 kernel: dm-integrity: don't increment hashoffset twice CVE-2026-72099 Bug Fixes and Enhancements: gve: backpo...