6256 matches found
DEBIAN-CVE-2026-13586
In Bouncy Castle for Java before 1.85, PKCS12 MAC and bag-decryption KDF iteration-count bound DoS. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...
MINI-F9HW-GP6F-8F9G
Bulletin has no description...
MINI-8V73-P45P-GR93
Bulletin has no description...
MINI-3HRJ-43VW-J2MQ
Bulletin has no description...
MINI-425G-WQMM-PH9P
Bulletin has no description...
MINI-V82C-C5CW-73M9
Bulletin has no description...
DEBIAN-CVE-2026-67322
GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clonefrom. The caller-supplied remote URL is passed through Git.polishurl, which on non-Cygwin platforms calls os.path.expandvars on the URL before invoking git clone. An attacker who controls the clone URL can emb...
DEBIAN-CVE-2026-67312
axios versions from 0.28.0 before 0.33.0 and from 1.0.0 before 1.18.0 contain uncontrolled recursion in formDataToJSON exposed as axios.formToJSON and used internally when serializing FormData with Content-Type: application/json. When an application passes attacker-controlled FormData field names...
DEBIAN-CVE-2026-67306
FreeRDP versions 3.28.0 and earlier contain an out-of-bounds read vulnerability in the RDP6 planar RLE bitmap decoder functions planardecompressplanerle and planardecompressplanerleonly in libfreerdp/codec/planar.c. Only the 1-byte control byte is bounds-checked; the subsequent 0–15...
DEBIAN-CVE-2026-67296
FreeRDP before 3.29.0 contains a denial of service vulnerability in the RDPEI server channel handler that fails to validate maximum PDU body length before stream allocation. A malicious RDP client can send a header-only RDPEI message with a large declared body length to force excessive memory...
DEBIAN-CVE-2026-67297
FreeRDP before 3.29.0 fails to enforce the RESPONSESIZELIMIT when processing Transfer-Encoding: chunked HTTP responses in httpresponserecvbody. Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering th...
RHSA-2026:48790 Red Hat Security Advisory: osbuild-composer security update
Bulletin has no description...
RHSA-2026:48650 Red Hat Security Advisory: vim security update
Bulletin has no description...
MINI-X9QC-29W9-WQQ8
Bulletin has no description...
MINI-MQ6X-H73J-CMX3
Bulletin has no description...
DEBIAN-CVE-2026-62867
Bulletin has no description...
DEBIAN-CVE-2026-18446
fast-uri before 4.1.2, 3.1.5, and 2.4.4 requires a literal double forward slash to recognize a URI authority, so a reference that uses a backslash based introducer in place of it backslash backslash, forward slash backslash, or backslash forward slash is parsed with no authority and folds into th...
MINI-R3R3-5H8Q-M53X
Bulletin has no description...