BIT-KEYDB-2026-25588 RedisTimeSeries RESTORE invalid memory access may allow remote code execution

RedisTimeSeries is a time-series module for Redis. In all versions before 1.12.14 of RedisTimeSeries, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execute RESTORE on a server with the...

BELL-CVE-2026-6502

Bulletin has no description...

BELL-CVE-2026-43280

Bulletin has no description...

BELL-CVE-2026-43208

Bulletin has no description...

BELL-CVE-2026-43192 CVE-2026-43192 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-43164

Bulletin has no description...

BELL-CVE-2026-43144

Bulletin has no description...

BELL-CVE-2026-43095

Bulletin has no description...

BELL-CVE-2026-43106 CVE-2026-43106 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-43100

Bulletin has no description...

BELL-CVE-2026-43087 CVE-2026-43087 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2025-71271

Bulletin has no description...

BELL-CVE-2026-43070

Bulletin has no description...

CVE-2026-44602

Tor before 0.4.9.7 has a NULL pointer dereference when a CERT cell is received out of order, aka TROVE-2026-006...

imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling

A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered NaN cases improperly, causing them to succeed the check instead of failing it. The floating point coordinate is under caller control by passing a selected...

CVE-2026-42194 Incomplete fix for CVE-2026-32812: SSRF in admidio

Admidio is an open-source user management solution. Prior to version 5.0.9, the incomplete SSRF fix in Admidio's fetchmetadata.php validates the resolved IP address but passes the original hostname-based URL to curlinit, leaving a DNS rebinding TOCTOU window that allows redirecting requests to...

Linux Distros Unpatched Vulnerability : CVE-2026-8007

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Cast in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to...

PT-2026-38557

PJSIP is a free and open source multimedia communication library written in C. Prior to version 2.17, on GnuTLS builds, the SIP TLS transport sip transport tls can accept connections with invalid or untrusted certificates even when the application explicitly enables certificate verification via...

Linux Distros Unpatched Vulnerability : CVE-2026-7995

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in AdFilter in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML...

Linux Distros Unpatched Vulnerability : CVE-2026-7971

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in ORB in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium...