186259 matches found
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: misc: alcorpci: Fix nullptrderef when there is no PCI bridge There is an issue with the ASPM optional capability checking function. A device may be directly connected to the root complex. In this case, bus-selfbridge will be...
Astra Linux – Vulnerability in Ansible
Ansible versions 2.9.x before 2.9.1, 2.8.x before 2.8.7, and 2.7.x before 2.7.15 do not respect the “nolog” flag set to True when using Sumologic and Splunk callback plugins to send task result events to collectors. This could lead to the disclosure and collection of sensitive data...
Astra Linux – Vulnerability in freerdp2
FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The affected versions are vulnerable to a Out-of-Bounds Read vulnerability in the nscrledecompressdata function. This vulnerability occurs because the function processes context-Planes without...
RHSA-2026:58710 Red Hat Security Advisory: freerdp security update
Bulletin has no description...
RHSA-2026:58574 Red Hat Security Advisory: libarchive security update
Bulletin has no description...
RHSA-2026:58545 Red Hat Security Advisory: libtiff security update
Bulletin has no description...
RHSA-2026:58547 Red Hat Security Advisory: fence-agents security update
Bulletin has no description...
DEBIAN-CVE-2026-75975
fast-uri is a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not validate the complete IPv6 grammar, so invalid trailing text in an authority can be silently discarded and a malformed attacker-controlled host is turned into a different valid IPv6 destination. For...
DEBIAN-CVE-2026-75931
fast-uri is a URI parser for Node.js. It canonicalizes a host to its ASCII form only when the input carries an explicit scheme, so a scheme-relative reference such as a host preceded by two slashes is returned with its host verbatim and no error set. As a result fast-uri's own entry points disagr...
DEBIAN-CVE-2026-75899
fast-uri is a URI parser for Node.js. It decodes percent escapes in a hostname during parsing and then decodes the parsed hostname a second time during authority recomposition, so a single call to normalize or resolve can turn nested percent-encoded input into a different network destination such...
CVE-2026-75899
creationtimestamp| type| source ---|---|--- 2026-08-24 09:43:16+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mtszcefdrc2b 2026-08-24 11:14:13+00:00| seen| https://bsky.app/profile/suriq.io/post/3mtt6ezu55n25 2026-08-24 13:15:03+00:00| seen|...
CVE-2026-68960
creationtimestamp| type| source ---|---|--- 2026-08-24 08:45:38+00:00| seen| https://jvn.jp/en/jp/JVN33423625 2026-08-25 08:50:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mvusqjw2p424...
CVE-2026-78255
creationtimestamp| type| source ---|---|--- 2026-08-24 08:31:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hy4p6mf2rxbjw...
CVE-2026-59561
creationtimestamp| type| source ---|---|--- 2026-08-24 04:46:40+00:00| seen| https://jvn.jp/en/jp/JVN74538868 2026-08-27 00:47:17+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mtzmqpm2ek2a...
CVE-2026-78213
creationtimestamp| type| source ---|---|--- 2026-08-24 04:46:37+00:00| seen| https://www.twcert.org.tw/en/cp-139-11124-b8b51-2.html 2026-08-24 08:15:15+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-78213...
CSV Injection
Overview exceljs is a package to Read, manipulate and write spreadsheet data and styles to XLSX and JSON. Affected versions of this package are vulnerable to CSV Injection through the CSV.write process in lib/csv/csv.js. An attacker can trigger spreadsheet formula execution by supplying a cell...
CVE-2026-78147
creationtimestamp| type| source ---|---|--- 2026-08-24 00:12:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5f56s64fsu77e 2026-08-24 20:52:01+00:00| seen| https://bsky.app/profile/cvemon.bsky.social/post/3mtu6oabqzw24...
CVE-2026-77003
creationtimestamp| type| source ---|---|--- 2026-08-23 21:39:40+00:00| seen| https://bsky.app/profile/cvemon.bsky.social/post/3mtrqujhhvs2k...