153 matches found
MINI-QHMX-34QG-J56G
Bulletin has no description...
UBUNTU-CVE-2026-33630
c-ares is an asynchronous resolver library. From ver 1.32.3 until 1.34.7, a use-after-free / double-free in c-ares' query-completion handling. The same flaw — a query's callback being invoked while the query is still linked in the channel's internal lookup structures — is present at multiple poin...
MINI-M99Q-G43M-4PM4
Bulletin has no description...
MINI-PWPH-XX78-XMJ6
Bulletin has no description...
CGA-2G7J-536C-5H4P
Bulletin has no description...
MINI-2975-7VHG-PPWX
Bulletin has no description...
MINI-HF2G-2HQG-FM26
Bulletin has no description...
UBUNTU-CVE-2026-84145
Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was...
MINI-3CCM-W5WP-C7CV
Bulletin has no description...
MINI-G4M2-8HFP-FQH3
Bulletin has no description...
MINI-RQW2-2Q59-F46X
Bulletin has no description...
CGA-6X7Q-FF69-48M4
Bulletin has no description...
CVE-2026-12841
Unknown description...
SUSE CVE-2026-55244
ASTEVAL is an evaluator of Python expressions and statements. Prior to 1.0.9, FROMPY in asteval/astutils.py exposes BaseException, SystemExit, KeyboardInterrupt, and GeneratorExit to expressions evaluated by asteval.Interpreter.eval, while run and eval in asteval/asteval.py catch Exception rather...
SUSE CVE-2026-55998
The endpoint /v3/import/tokenclusterId.yaml retrieves the cluster object before validating the token. When a valid cluster ID references a cluster that has private registry secrets configured, a nil pointer dereference in pkg/systemtemplate/privateregistry.go causes the request to return HTTP 502...
SUSE CVE-2026-53541
OliveTin gives access to predefined shell commands from a web interface. The filterToDefinedArgumentsOnly function in the executor is intended to discard any arguments not explicitly defined in the action's configuration. However, prior to commit ebffd9f040f791208aee1db2e5a8aecd1e3e603d, a specia...
SUSE CVE-2026-53713
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, toabsolutenormalizedpath in internal/gatewayapi/luavalidator/security.lua does not collapse redundant separators before iscriticalpath evaluates Lua...
SUSE CVE-2026-53999
unknown...
SUSE CVE-2026-55770
OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao used EscapeLDAPValue, an RFC 4514 distinguished-name escaping function, where RFC 4515 LDAP search-filter escaping was required in sdk/helper/ldaputil/client.go GetUserDN. With the LDAP authentication...