5978 matches found
DEBIAN-CVE-2026-53615
util-linux is a random collection of Linux utilities. Before util-linux 2.41.4, parsedosextended in libblkid/src/partitions/dos.c computes an extended-partition start sector with 32-bit addition and does not apply the extended-area bounds checks to the first two EBR entries. A local attacker who...
DEBIAN-CVE-2026-53612
util-linux is a random collection of Linux utilities. In util-linux 2.39 through 2.41.4 and 2.42 through 2.42.1, the SUID mount utility's hookowner.c post-mount hook performs path-based chmod and lchown operations on a previously validated mount target. A local low-privileged user authorized by a...
DEBIAN-CVE-2026-42617
In NTFS-3G before 2026.7.7, a heap buffer overflow exists in ntfsirtoib in index.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by extending a directory, e.g., by creating a file...
DEBIAN-CVE-2026-44236
rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized connection.tune.framemax value during amqplogin, and rabbitmq-c accepts the value in amqplogininner in librabbitmq/amqpsocket.c. amqptuneconnection in...
DEBIAN-CVE-2026-42784
A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an...
DEBIAN-CVE-2026-59679
fsreadglyphs in the libXfont2 font-server client src/fc/fserve.c indexes the per-character encoding array using numchars from the FSQueryXBitmaps16 reply, but that array was allocated with a size derived from numextents in the separate FSQueryXExtents16 reply. The two CARD32 fields are never...
DEBIAN-CVE-2026-57825
In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because symlinks are mishandled during use of .install files...
BELL-CVE-2026-80597
Bulletin has no description...
MINI-C443-G6R9-85C5
Bulletin has no description...
MINI-Q4WH-9RJW-Q5HQ
Bulletin has no description...
MINI-84V7-G9G7-8676
Bulletin has no description...
MINI-MP36-G42H-Q83F
Bulletin has no description...
MINI-53P6-787C-J523
Bulletin has no description...
DEBIAN-CVE-2026-50190
Shaarli is a personal bookmarking service. Versions prior to 0.16.3 are vulnerable to stored XSS in application/front/controller/visitor/BookmarkListController.php. The permalink handler concatenates the raw $bookmark-getTitle into the pagetitle template variable and the RainTPL template emits it...
MINI-R428-4G4V-5XC3
Bulletin has no description...
MINI-PRCJ-P56M-MCV6
Bulletin has no description...
MINI-W46F-52G3-P99W
Bulletin has no description...
DEBIAN-CVE-2026-55194
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, rpcclientrecvfragment in libfreerdp/core/gateway/rpcclient.c ensures the response reassembly stream capacity using only the server-declared allochint rather than the actual StubLength about to be written. A maliciou...