MINI-5PVQ-GMQX-4CP4

Bulletin has no description...

MINI-52RH-RXCV-W42M

Bulletin has no description...

CLSA-2026-1777455447 openssl: Fix of CVE-2026-28387

CVE-2026-28387: fix use-after-free / double-free in danematch by releasing the previously stored dane-mcert with X509free instead of OPENSSLfree; the slot is reference-bumped via X509upref so the matching free is X509free...

MINI-P942-VHRX-MXRX

Bulletin has no description...

CVE-2026-42515 Insecure Direct Object Reference (IDOR) Vulnerability in e-Sushrut HMIS

This vulnerability exists in e-Sushrut due to improper access control in resource access validation. An authenticated attacker could exploit this vulnerability by manipulating parameter in the API request URL to gain unauthorized access to sensitive information of patients on the targeted system...

MINI-X5MW-RGV9-R62R

Bulletin has no description...

libxml2: libxml2: Denial of Service via crafted XSD-validated document

A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition XSD validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that...

MINI-J9P5-5RJ9-75RH

Bulletin has no description...

MINI-C629-36M6-J429

Bulletin has no description...

MINI-9WHF-PJG5-FV2W

Bulletin has no description...

CLEANSTART-2026-SP87460 Security fixes for ghsa-72hv-8253-57qq applied in versions: 3.8.6-r0

Security vulnerability affects the apache-zookeeper package. This issue is resolved in later releases. See references for vulnerability details...

MINI-83X8-PH53-37J4

Bulletin has no description...

The vulnerability of the perf_pending_task_sync() function in the kernel/events/core.c module, which manages kernel-level events in Linux operating systems, allows a attacker to cause a service failure.

The vulnerability of the perfpendingtasksync function in the kernel/events/core.c module, which handles kernel events in Linux operating systems, is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...

Origin Validation Error

Overview Affected versions of this package are vulnerable to Origin Validation Error via the reuse of an easy handle in HTTP requests when a custom Host: header is set for the initial request and omitted in a subsequent one. An attacker can obtain cookies intended for a different host by exploiti...

PT-2026-35989

Name of the Vulnerable Software and Affected Versions PDFunite version 0.41.0 Description A buffer overflow allows local attackers to crash the application by processing malformed PDF files during merge operations. A segmentation fault can be triggered in the XRef::getEntry function within...

The vulnerability of the ti_sci_intr_irq_domain_probe() function in the drivers/irqchip/irq-ti-sci-intr.c file of the Linux operating system’s IRQ chip driver module allows a attacker to cause a service failure.

The vulnerability of the tisciintrirqdomainprobe function in the drivers/irqchip/irq-ti-sci-intr.c file of the Linux kernel’s IRQ chip driver is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the `of_get_dr_timings()` function in the `drivers/memory/of_memory.c` module of the Linux kernel’s memory driver, which allows a hacker to cause a system failure.

The vulnerability of the ofgetdrtimings function in the drivers/memory/ofmemory.c module of the Linux kernel’s memory driver library is related to errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a system failure...

MINI-3H4V-86FM-CMRQ

Bulletin has no description...

MINI-7R9W-624P-795C

Bulletin has no description...

CVE-2026-41649

Outline is a service that allows for collaborative documentation. The shares.create API endpoint starting in version 0.86.0 and prior to version 1.7.0 has an insecure direct object reference.. When both collectionId and documentId are provided in the request, the authorization logic only checks...