583 matches found
UBUNTU-CVE-2026-64089
In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix negative lastchangesetlen batadvpivtt::lastchangesetlen len was declared as s16, but the field is never intended to hold a negative value. When a value greater than 32767 is assigned, it wraps to a negative...
DEBIAN-CVE-2026-64080
In the Linux kernel, the following vulnerability has been resolved: firmware: armffa: Snapshot notifier callbacks under lock Both notification handlers currently look up a notifier callback under notifylock, drop the lock, and then dereference the returned notifier entry. A concurrent unregister...
DEBIAN-CVE-2026-9323
The urwid web display backend urwid/display/web.py generates web session identifiers urwidid in Screen.start by concatenating two random.randrange109 calls that use Python's Mersenne Twister PRNG, which is not cryptographically secure. Each call consumes approximately 30 bits of PRNG state, and t...
RHSA-2026:39183 Red Hat Security Advisory: python3.12 security update
Bulletin has no description...
JLSEC-2026-718 Heap buffer overflow in DTLS 1.3 ACK message processing
Heap buffer overflow in DTLS 1.3 ACK message processing. A remote attacker can send a crafted DTLS 1.3 ACK message that triggers a heap buffer overflow...
ROOT-APP-NPM-CVE-2025-56200 CVE-2025-56200 in @rootio/validator - Patched by Root
Root has patched CVE-2025-56200 in the @rootio/validator package for Root:npm. Multiple fixed versions available...
UBUNTU-CVE-2026-53365
In the Linux kernel, the following vulnerability has been resolved: vsock/virtio: fix zerocopy completion for multi-skb sends When a large message is fragmented into multiple skbs, the zerocopy uarg is only allocated and attached to the last skb in the loop. Non-final skbs carry pinned user pages...
CVE-2026-21045
Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory...
MAL-2026-7315 Malicious code in lreactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7152 Malicious code in angularss (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9822 Malicious code in zw_nobdr_day2 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9750 Malicious code in zrgvsearch65d4 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9733 Malicious code in zrgvp5 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-8892 Malicious code in sproxytestgitone (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-8170 Malicious code in oaidx3409275 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
RHSA-2026:35830 Red Hat Security Advisory: grafana security update
Bulletin has no description...
RHSA-2026:35806 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Bulletin has no description...
CVE-2026-38970
pdfcpu through v0.11.1 contains an uncontrolled-recursion denial-of-service issue in pkg/pdfcpu/model/parse.go. The parser descends recursively through nested PDF objects, including arrays, via ParseObjectContext and parseArray without enforcing a maximum nesting depth...
UBUNTU-CVE-2026-13149
brace-expansion through 5.0.6 is vulnerable to denial of service. The expand function exhibits exponential-time complexity in the number of consecutive non-expanding '' brace groups. An attacker who passes a crafted string to expand, directly or transitively, can cause significant CPU consumption...