16289 matches found
MINI-3FJG-XX6W-VH78
Bulletin has no description...
MINI-247V-77RF-66VC
Bulletin has no description...
MINI-FGXJ-7J7Q-R4WF
Bulletin has no description...
MINI-WHM9-FG3M-4546
Bulletin has no description...
MINI-M8P6-68VV-C9P2
Bulletin has no description...
DEBIAN-CVE-2026-65979
OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4.12, the HTJ2K decoder parses a header-length field PLEN from a chunk's compressed data but never checks that this value fits within the...
CVE-2026-59682
creationtimestamp| type| source ---|---|--- 2026-08-25 16:59:57+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/c4gajlaaid4bv 2026-08-26 09:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mty2mg26242c 2026-08-29 05:30:03+00:00| seen|...
DEBIAN-CVE-2026-79782
rclone before 1.74.4 fails to strip the X-Amz-Security-Token header when an S3 redirect changes scheme from HTTPS to HTTP on the same host. Attackers can intercept plaintext HTTP traffic to capture AWS STS session tokens sent in request headers...
DEBIAN-CVE-2026-79778
rclone before v1.75.0 contains a denial of service vulnerability in the WebDAV TUS creation handler that dereferences a nil response before checking for transport errors. A malicious or compromised configured endpoint can reset connections during TUS uploads to trigger a panic that terminates...
DEBIAN-CVE-2026-79780
rclone before v1.75.0 fails to sanitize IBM IAM bearer tokens and SSE-C encryption keys during S3 redirect callbacks, allowing credentials to be preserved across scheme or host changes. Attackers observing network traffic from a trusted endpoint can capture reusable IBM IAM tokens on same-host...
DEBIAN-CVE-2026-79776
rclone before 1.75.0 mounts the pprof debug handler as its own router route, bypassing the fail-closed authentication rule in the main handler. Attackers can access the /debug/pprof/cmdline endpoint unauthenticated to retrieve the full process argv including backend credentials...
DEBIAN-CVE-2026-79675
NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java function, allowing attackers to inject dangerous JVM flags. Attackers can supply malicious options like -agentpath, -javaagent, or @argfile to Stanford wrapper classes to achieve arbitrary...
DEBIAN-CVE-2026-79769
Nokogiri versions before 1.19.4 contain a possible invalid out-of-bounds memory read in the protected internal Nodeinitializecopywithargs helper behind Nodedup and clone, which unwrapped its source argument as an xmlNode without a type check. If application code calls this protected method with a...
MINI-X32G-R8R6-M9Q9
Bulletin has no description...
MINI-GMQ9-VJ7R-9HMW
Bulletin has no description...
MINI-68H6-39PQ-P5V3
Bulletin has no description...
MINI-5G29-F44Q-W3PW
Bulletin has no description...
MINI-VQXJ-9G75-6X9P
Bulletin has no description...