119 matches found
DEBIAN-CVE-2026-46571
In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfsfixfilename in libntfs-3g/reparse.c that allows an attacker to read possibly confidential information in ntfs-3g process memory by crafting a malicious NTFS image. The out-of-bounds read is triggered by a readlink on a corrupted file...
DEBIAN-CVE-2026-71847
Ruby JSON is a JSON implementation for Ruby. From 2.20.0 until 2.21.2, Ruby's JSON native C extension clears the consumed JSON::ResumableParser input buffer but leaves state.start, state.cursor, and state.end pointing into released storage. When partialvalue reconstructs an incomplete object...
MINI-436X-868W-V65W
Bulletin has no description...
MINI-P67M-4WPC-7QVM
Bulletin has no description...
DEBIAN-CVE-2026-66066
Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Active Storage does not disable libvips operations marked unsafe for untrusted content, allowing a crafted upload to invoke such an operation. Consuming applications are...
BELL-CVE-2026-64409
Bulletin has no description...
BELL-CVE-2026-64475
Bulletin has no description...
BELL-CVE-2026-64208
Bulletin has no description...
MINI-GVX3-G995-HF75
Bulletin has no description...
MINI-99CH-7M97-JWP4
Bulletin has no description...
MINI-QCJC-X6M9-P63G
Bulletin has no description...
DEBIAN-CVE-2026-64265
In the Linux kernel, the following vulnerability has been resolved: fuse: clear intrentry in fuseresend and fuseremovependingreq When fuseresend moves a request from fpq-processing back to fiq-pending, it sets FRPENDING and clears FRSENT but does not remove the requests intrentry from...
MINI-HC2F-229V-4JRJ
Bulletin has no description...
BELL-CVE-2026-63982 CVE-2026-63982 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-63889
Bulletin has no description...
BELL-CVE-2026-63906
Bulletin has no description...
DEBIAN-CVE-2026-64086
In the Linux kernel, the following vulnerability has been resolved: hwmon: pmbus/adm1266 include PEC byte in pmbusblockxfer read buffer adm1266pmbusblockxfer sets up the read transaction with .buf = data-readbuf, .len = ADM1266PMBUSBLOCKMAX + 2, but readbuf in struct adm1266data is declared as u8...
DEBIAN-CVE-2026-53394
In the Linux kernel, the following vulnerability has been resolved: nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race When findorallocopenstateowner encounters an unconfirmed owner, it calls releaseopenowner and sets oo = NULL. Control then falls through past the if oo guard -...