5901 matches found
DEBIAN-CVE-2026-59679
fsreadglyphs in the libXfont2 font-server client src/fc/fserve.c indexes the per-character encoding array using numchars from the FSQueryXBitmaps16 reply, but that array was allocated with a size derived from numextents in the separate FSQueryXExtents16 reply. The two CARD32 fields are never...
DEBIAN-CVE-2026-57825
In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files...
MINI-C443-G6R9-85C5
Bulletin has no description...
MINI-84V7-G9G7-8676
Bulletin has no description...
MINI-MP36-G42H-Q83F
Bulletin has no description...
DEBIAN-CVE-2026-50190
Shaarli is a personal bookmarking service. Versions prior to 0.16.3 are vulnerable to stored XSS in application/front/controller/visitor/BookmarkListController.php. The permalink handler concatenates the raw $bookmark-getTitle into the pagetitle template variable and the RainTPL template emits it...
MINI-PRCJ-P56M-MCV6
Bulletin has no description...
MINI-W46F-52G3-P99W
Bulletin has no description...
DEBIAN-CVE-2026-55194
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, rpcclientrecvfragment in libfreerdp/core/gateway/rpcclient.c ensures the response reassembly stream capacity using only the server-declared allochint rather than the actual StubLength about to be written. A maliciou...
MINI-W375-FFWH-R827
Bulletin has no description...
MINI-P4VR-WQ8C-2HV5
Bulletin has no description...
MINI-FC3M-33PC-2GC5
Bulletin has no description...
MINI-X8GM-2XX3-49XG
Bulletin has no description...
MINI-H4GF-GXWM-JHC2
Bulletin has no description...
MINI-JCJJ-GGX5-V657
Bulletin has no description...
MINI-7WPX-CX66-8X49
Bulletin has no description...
MINI-F6GC-52G6-FPQ9
Bulletin has no description...
MINI-CMG4-CFFF-9MQJ
Bulletin has no description...