755 matches found
Fedora 45 : nsd (2026-3d49d46891)
The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3d49d46891 advisory. Update to simdzone-0.2.7 with fixes for CVE-2026-101337, CVE-2026-101338, CVE-2026-101339 and CVE-2026-101341 Fix for CVE-2026-101337: Reserve corre...
AZL-112241 CVE-2026-97045 affecting package sriov-network-device-plugin 3.7.0-9
In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace such as or fostered under ,...
AZL-111847 CVE-2026-97045 affecting package cloud-provider-kubevirt 0.5.1-10
In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace such as or fostered under ,...
AZL-112016 CVE-2026-97045 affecting package kube-vip-cloud-provider 0.0.10-11
In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace such as or fostered under ,...
AZL-111703 CVE-2026-103995 affecting package docbook5-style-xsl 1.79.2-11
Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents...
EUVD-2026-111382
Response body and chunk parsing would handle non-hex or negative integers incorrectly which could result in misinterpreting HTTP response contents...
GHSA-M943-M63M-W62W Nodemailer: A ";" inside a quoted string or comment ends an address group early in addressparser, turning display text into a recipient
Vulnerability summary addressparser ends an RFC 5322 group at the first ;, including one inside a quoted display name or a comment. The text after it is parsed again as top level recipients with the quoting flipped, so text that every conformant parser reads as a display name or comment becomes a...
Curl 8.7.0 < 8.23.0 Cookie Jar Parsing Issue
The version of curl installed on the remote host is 8.7.0 prior to 8.23.0. It is, therefore, affected by a cookie jar vulnerability: - When writing a long cookie name and value to a Netscape cookie jar, a remote HTTP server can make curl write a record that exceeds its line-length parsing limit...
CVE-2026-92386 server-set cookie aborts cookie jar load
When writing a long cookie name and value to a Netscape cookie jar, a remote HTTP server can make curl write a record that exceeds its line-length parsing limit. Consequently, any subsequent curl invocation reading from that same cookie jar using --cookie silently aborts parsing prematurely upon...
CVE-2026-92386
The curl utility (versions prior to 8.23.0 ) is vulnerable to a cookie jar parsing issue (CWE-1284). A remote HTTP server can force curl to write a record to a Netscape cookie jar that exceeds its line-length parsing limit. This causes subsequent curl invocations using the --cookie flag to silent...
Curl input validation vulnerability
The curl version 8.7.0 to 8.22.0 has a vulnerability related to input validation errors. This vulnerability arises from writing overly long cookie names and values into the Netscape cookie jar, exceeding the line length limit. As a result, when using the --cookie option to read the same cookie ja...
Linux Distros Unpatched Vulnerability : CVE-2026-98600
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Reject short EA=0 frames in rfcommrecvframe While rfcommrecvframe verifie...
SUSE CVE-2026-98600
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Reject short EA=0 frames in rfcommrecvframe While rfcommrecvframe verifies that skb-len is at least sizeofhdr + 1 4 bytes: 3-byte header + 1-byte FCS, an RFCOMM frame with an extended 2-byte length field...
DEBIAN-CVE-2026-98600
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Reject short EA=0 frames in rfcommrecvframe While rfcommrecvframe verifies that skb-len is at least sizeofhdr + 1 4 bytes: 3-byte header + 1-byte FCS, an RFCOMM frame with an extended 2-byte length field...
CVE-2026-98600
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Reject short EA=0 frames in rfcommrecvframe While rfcommrecvframe verifies that skb-len is at least sizeofhdr + 1 4 bytes: 3-byte header + 1-byte FCS, an RFCOMM frame with an extended 2-byte length field...
CVE-2026-98600
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Reject short EA=0 frames in rfcommrecvframe While rfcommrecvframe verifies that skb-len is at least sizeofhdr + 1 4 bytes: 3-byte header + 1-byte FCS, an RFCOMM frame with an extended 2-byte length field...
EUVD-2026-103645
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Reject short EA=0 frames in rfcommrecvframe While rfcommrecvframe verifies that skb-len is at least sizeofhdr + 1 4 bytes: 3-byte header + 1-byte FCS, an RFCOMM frame with an extended 2-byte length field...
Astra Linux – Vulnerability in Zabbix
Templates do not properly handle backticks as JavaScript string delimiters, and do not escape them as expected. Backticks have been used since ES6 for JavaScript template literals. If a template contains a Go template action within a JavaScript template literal, the contents of the action can be...
Astra Linux – vulnerability in dcmtk
DCMTK up to version 3.6.6 fails to properly release memory. The program allocates heap memory for data parsing but does not free it when there is an error during parsing. Sending specific requests to the dcmqrdb program results in memory leaks. An attacker can exploit this to carry out a...