JLSEC-2026-1304

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop is triggered when Exiv2 is used to read the metadata of a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of...

MINI-79HR-WHJ5-MWGR

Bulletin has no description...

MINI-R7GX-95FW-R5CM

Bulletin has no description...

MINI-QCV7-XF5C-P7PQ

Bulletin has no description...

[SECURITY] Fedora 44 Update: apr-util-1.6.5-1.fc44

The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more...

CVE-2026-52072

mgtlsclientrecvhello sizet underflow in extlen bounds check / mgtlsclientrecvhello extlen fixed-offset OOB read...

Moderate: nghttp2 security update

libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 HTTP/2 protocol in C. Security Fixes: nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests CVE-2026-58055 For more details about the security issues,...

CVE-2026-59850 vulnerabilities

Vulnerabilities for packages: libssh...

CVE-2026-59845 vulnerabilities

Vulnerabilities for packages: libssh...

CVE-2026-59847 vulnerabilities

Vulnerabilities for packages: libssh...

UBUNTU-CVE-2026-19588

Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers...

JLSEC-2026-1250

A heap-based buffer overflow flaw was found in libmodbus in function modbusreply in src/modbus.c...

CVE-2026-19411 Shim/dp.c library: null-pointer dereference in is_removable_media_path() when devicepathtostr() returns null

A NULL pointer vulnerability has been found in the the shim application of dp.c library. A missing NULL pointer could allow attackers to perform a denial of service attack on a system that uses shim application for UEFI bootloader...

CVE-2026-6368 wordexp with WRDE_APPEND can return or use invalid memory

Calling wordexp with WRDEAPPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the wewordv member, which on subsequent calls to wordfree may abort the process...

ALSA-2026:52675 Moderate: libarchive security update

The libarchive programming library can create and read several different streaming archive formats, including GNU tar, cpio, and ISO 9660 CD-ROM images. Libarchive is used notably in the bsdtar utility, scripting language bindings such as python-libarchive, and several popular desktop file...

CVE-2026-6368: Use of Uninitialized Resource

Calling wordexp with WRDEAPPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the wewordv member, which on subsequent calls to wordfree may abort the process...

PT-2026-69894

Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.0 through 2.43 Description Calling the wordexp function with the WRDE APPEND flag can cause the interface to return invalid memory within the we wordv member. This condition may lead to a process abort during subsequen...

MeshCore room-server-v1.17.0

About MeshCore MeshCore is a lightweight, portable C++ library that enables multi-hop packet routing for embedded projects using LoRa and other packet radios. It is designed for developers who want to create resilient, decentralized communication networks that work without the internet. 🔍 What is...

EulerOS 2.0 SP11 : glibc (EulerOS-SA-2026-3066)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Calling the scanf family of functions with a %mc malloc'd character match in the GNU C Library version 2.7 to version 2.43 with a format width...

EulerOS 2.0 SP15 : glibc (EulerOS-SA-2026-2924)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The deprecated functions nsprintrrf, nsprintrr and fpnquery in the GNU C Library version 2.2 and newer fail to validate the RDATA content against t...