25310 matches found
DEBIAN-CVE-2026-68085
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciuart: clear HCIUARTSENDING when writework is canceled HCIUARTSENDING bit in txstate means writework is pending and blocks queueing it again. Currently this bit is not cleared when canceling the work in hciuartclose,...
CVE-2026-14224
creationtimestamp| type| source ---|---|--- 2026-08-10 12:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msq3cu4avg2i 2026-08-11 08:16:10+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mss6elzqv22l...
CGA-G648-M8CR-XQ5C
Bulletin has no description...
CVE-2026-72589
creationtimestamp| type| source ---|---|--- 2026-08-10 11:42:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mspzfybvir2u 2026-08-10 12:24:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/byddngx6ghhgb...
MINI-WQR5-3QFJ-VP55
Bulletin has no description...
DEBIAN-CVE-2026-71394
GNU Emacs for Android improperly validates the table header input in sfntreadtabledirectory in src/sfnt.c. Due to an incorrect comparison variable in the read-length check, a crafted font file that claims to contain more table directory entries than actually present causes the parser to return a...
CGA-GF8H-4JVF-5VHW
Bulletin has no description...
CGA-X853-45VM-R257
Bulletin has no description...
CVE-2026-71271
Memos' webhook URL validation, isReservedIP internal/webhook/validate.go, checks a candidate IP against a reservedCIDRs list that omits 0.0.0.0/8 and never calls ip.IsUnspecified — unlike the correctly implemented sibling function isInternalIP in internal/httpgetter/htmlmeta.go, which does...
EUVD-2026-52687
A Server-Side Request Forgery SSRF bypass vulnerability exists in “stunnel” 5.79 and lower when configured in SOCKS proxy mode. This flaw allows a client to bypass intended localhost restrictions by using IPv4-mapped IPv6 addresses e.g., “::ffff:127.0.0.1” or unspecified addresses "0.0.0.0", "::"...
CVE-2026-70367
A Server-Side Request Forgery SSRF bypass vulnerability exists in “stunnel” 5.79 and lower when configured in SOCKS proxy mode. This flaw allows a client to bypass intended localhost restrictions by using IPv4-mapped IPv6 addresses e.g., “::ffff:127.0.0.1” or unspecified addresses "0.0.0.0", "::"...
CVE-2026-70367 Stunnel: ssrf bypass in stunnel socks proxy via ipv4-mapped ipv6 loopback and unspecified addresses allows access to loopback-only services
A Server-Side Request Forgery SSRF bypass vulnerability exists in “stunnel” 5.79 and lower when configured in SOCKS proxy mode. This flaw allows a client to bypass intended localhost restrictions by using IPv4-mapped IPv6 addresses e.g., “::ffff:127.0.0.1” or unspecified addresses "0.0.0.0", "::"...
CVE-2026-70367
CVE-2026-70367 affects stunnel
CVE-2026-70367 Stunnel: ssrf bypass in stunnel socks proxy via ipv4-mapped ipv6 loopback and unspecified addresses allows access to loopback-only services
A Server-Side Request Forgery SSRF bypass vulnerability exists in “stunnel” 5.79 and lower when configured in SOCKS proxy mode. This flaw allows a client to bypass intended localhost restrictions by using IPv4-mapped IPv6 addresses e.g., “::ffff:127.0.0.1” or unspecified addresses "0.0.0.0", "::"...
CVE-2026-70367
A Server-Side Request Forgery SSRF bypass vulnerability exists in “stunnel” 5.79 and lower when configured in SOCKS proxy mode. This flaw allows a client to bypass intended localhost restrictions by using IPv4-mapped IPv6 addresses e.g., “::ffff:127.0.0.1” or unspecified addresses "0.0.0.0", "::"...
CVE-2026-53584
Unknown description...
Apache Traffic Server buffer overflow vulnerability (CNVD-2026-30700)
Apache Traffic Server is a high-performance HTTP proxy server open source from the Apache Foundation in the United States. Apache Traffic Server has a buffer overflow vulnerability, which stems from improper handling of substitute inputs by the regexremap plugin. Attackers can exploit this...
BELL-CVE-2026-16043
Bulletin has no description...