5949 matches found
DEBIAN-CVE-2026-44236
rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized connection.tune.framemax value during amqplogin, and rabbitmq-c accepts the value in amqplogininner in librabbitmq/amqpsocket.c. amqptuneconnection in...
DEBIAN-CVE-2026-42784
A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an...
DEBIAN-CVE-2026-59679
fsreadglyphs in the libXfont2 font-server client src/fc/fserve.c indexes the per-character encoding array using numchars from the FSQueryXBitmaps16 reply, but that array was allocated with a size derived from numextents in the separate FSQueryXExtents16 reply. The two CARD32 fields are never...
DEBIAN-CVE-2026-57825
In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files...
BELL-CVE-2026-80597
Bulletin has no description...
MINI-C443-G6R9-85C5
Bulletin has no description...
MINI-84V7-G9G7-8676
Bulletin has no description...
MINI-MP36-G42H-Q83F
Bulletin has no description...
MINI-53P6-787C-J523
Bulletin has no description...
DEBIAN-CVE-2026-50190
Shaarli is a personal bookmarking service. Versions prior to 0.16.3 are vulnerable to stored XSS in application/front/controller/visitor/BookmarkListController.php. The permalink handler concatenates the raw $bookmark-getTitle into the pagetitle template variable and the RainTPL template emits it...
MINI-R428-4G4V-5XC3
Bulletin has no description...
MINI-PRCJ-P56M-MCV6
Bulletin has no description...
MINI-W46F-52G3-P99W
Bulletin has no description...
DEBIAN-CVE-2026-55194
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, rpcclientrecvfragment in libfreerdp/core/gateway/rpcclient.c ensures the response reassembly stream capacity using only the server-declared allochint rather than the actual StubLength about to be written. A maliciou...
MINI-W375-FFWH-R827
Bulletin has no description...
MINI-P4VR-WQ8C-2HV5
Bulletin has no description...
MINI-FC3M-33PC-2GC5
Bulletin has no description...
MINI-X8GM-2XX3-49XG
Bulletin has no description...