CVE-2026-35351 vulnerabilities

Vulnerabilities for packages: uutils...

GHSA-W8M4-4V35-V6X3 vulnerabilities

Vulnerabilities for packages: uutils...

GHSA-X4MC-MQM7-GG39 vulnerabilities

Vulnerabilities for packages: uutils...

CVE-2026-35374 vulnerabilities

Vulnerabilities for packages: uutils...

GHSA-53GR-WMF4-8HH3 vulnerabilities

Vulnerabilities for packages: uutils...

CVE-2026-35350 vulnerabilities

Vulnerabilities for packages: uutils...

CVE-2026-35360 vulnerabilities

Vulnerabilities for packages: uutils...

PHP: PHP: Denial of Service via improper handling of signed characters in ctype functions

A flaw was found in PHP. Some functions, including urldecode, incorrectly pass signed characters to character type ctype functions. On certain systems, this can lead to accessing memory with a negative offset. This vulnerability can be exploited by an attacker to trigger a denial of service DoS,...

[SECURITY] Fedora 44 Update: perl-Crypt-PasswdMD5-1.4.3-1.fc44

This package provides MD5-based crypt functions...

CVE-2026-39829 affecting package packer for versions less than 1.9.5-14

CVE-2026-39829 affecting package packer for versions less than 1.9.5-14. A patched version of the package is available...

CVE-2026-33377 vulnerabilities

Vulnerabilities for packages: grafana-fips, grafana...

CVE-2026-28380 vulnerabilities

Vulnerabilities for packages: grafana-fips, grafana...

GHSA-8MRJ-8PC8-39JM vulnerabilities

Vulnerabilities for packages: grafana-fips, grafana...

GHSA-5M62-PW8W-7W9F vulnerabilities

Vulnerabilities for packages: thingsboard...

CVE-2026-46227

In the Linux kernel, the following vulnerability has been resolved: sctp: revalidate list cursor after sctpsendmsgtoasoc in SCTPSENDALL The SCTPSENDALL path in sctpsendmsg iterates ep-asocs with listforeachentrysafe, which caches the next entry in @tmp before the loop body runs. The body calls...

CVE-2026-46196

In the Linux kernel, the following vulnerability has been resolved: tracepoint: balance regfunc on funcadd failure in tracepointaddfunc When a tracepoint goes through the 0 - 1 transition, tracepointaddfunc invokes the subsystem's ext-regfunc before attempting to install the new probe via funcadd...

CVE-2026-46142

In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix VF illegal register access Register WXCFGPORTST is a PF restricted register. When a VF is initialized, attempting to read this register triggers an illegal register access, which lead to a system hang. When the...

CVE-2026-46140

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: validate WMT event SKB length before struct access btmtkusbhciwmtsync casts the WMT event response SKB data to struct btmtkhciwmtevt 7 bytes and struct btmtkhciwmtevtfuncc 9 bytes without first checking that the...

GHSA-M56P-RP6V-288R vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-9120 vulnerabilities

Vulnerabilities for packages: chromium...