235 matches found
DEBIAN-CVE-2026-72217
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Bound-check xdrbuftobvec stores before writing xdrbuftobvec writes a biovec into the caller's array before testing whether that slot is in range, and the head branch performs the store with no check at all. When the...
claudit
claudit – AI-based code security auditing tool claudit is an...
BELL-CVE-2026-64493
Bulletin has no description...
UBUNTU-CVE-2026-64207
In the Linux kernel, the following vulnerability has been resolved: net/sched: dualpi2: fix GSO backlog accounting When DualPI2 splits a GSO skb into N segments, it propagates N additional packets to its parent before returning NETXMITSUCCESS. The parent then accounts for the original skb once...
PYSEC-2026-1082 Aim vulnerable to Cross-Site Request Forgery
aimhubio/aim version 3.22.0 contains a Cross-Site Request Forgery CSRF vulnerability in the tracking server. The vulnerability is due to overly permissive CORS settings, allowing cross-origin requests from all origins. This enables CSRF attacks on all endpoints of the tracking server, which can b...
PYSEC-2026-256 Agno is vulnerable to Eval Injection
Agno versions prior to 2.3.24 contain an arbitrary code execution vulnerability in the model execution component that allows attackers to execute arbitrary Python code by manipulating the fieldtype parameter passed to eval. Attackers can influence the fieldtype value in a FunctionCall to achieve...
BELL-CVE-2026-53000
Bulletin has no description...
DEBIAN-CVE-2026-55655
A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack ca...
BELL-CVE-2026-29167
Bulletin has no description...
UBUNTU-CVE-2026-50593
Graphite before 1.3.15 has an integer underflow and resultant out-of-bounds write via Graphite actions, because slotat does not ensure that an offset is within the allowed slot-map range...
BELL-CVE-2026-46211
Bulletin has no description...
BELL-CVE-2026-45863
Bulletin has no description...
DEBIAN-CVE-2026-42000
Insufficient Validation of Names During AXFR...
DEBIAN-CVE-2026-8962
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11...
BELL-CVE-2026-32175
Bulletin has no description...
BELL-CVE-2026-43453
Bulletin has no description...
BELL-CVE-2026-31651
Bulletin has no description...
DEBIAN-CVE-2026-5402
TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4.6.4 allows denial of service and possible code execution...