18017 matches found
MINI-6WP6-V2RR-JQHM
Bulletin has no description...
Moderate: nghttp2 security update
libnghttp2 is a library implementing the Hypertext Transfer Protocol version 2 HTTP/2 protocol in C. Security Fixes: nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests CVE-2026-58055 For more details about the security issues,...
CVE-2026-17574 affecting package hdf5 for versions less than 1.14.6-4
CVE-2026-17574 affecting package hdf5 for versions less than 1.14.6-4. A patched version of the package is available...
GHSA-4H4R-Q9XG-GFMM vulnerabilities
Vulnerabilities for packages: libssh...
CVE-2026-59845 vulnerabilities
Vulnerabilities for packages: libssh...
CVE-2026-59850 vulnerabilities
Vulnerabilities for packages: libssh...
CVE-2026-59847 vulnerabilities
Vulnerabilities for packages: libssh...
UBUNTU-CVE-2026-19588
Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers...
CVE-2026-19143 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-RHRM-PW3P-V8J2 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-19148 vulnerabilities
Vulnerabilities for packages: chromium...
Linux Distros Unpatched Vulnerability : CVE-2026-71266
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tinyobjloader-c's tinyobjparseandindexmtlfile tinyobjloaderc.h reads each line of a .mtl material file into a fixed 4096-byte stack buffer via memcpylinebuf, p,...
UBUNTU-CVE-2026-48813
Flawfinder is a a static analysis tool for finding vulnerabilities in C/C++ source code. Versions prior to 2.0.20 have an improper input neutralization issue leading to output manipulation, specifically, Terminal/ANSI Escape Sequence Injection and XML Injection. A malicious file whose name contai...
EUVD-2026-56901
Flawfinder is a a static analysis tool for finding vulnerabilities in C/C++ source code. Versions prior to 2.0.20 have an improper input neutralization issue leading to output manipulation, specifically, Terminal/ANSI Escape Sequence Injection and XML Injection. A malicious file whose name contai...
CVE-2026-68372
A flaw was found in the Linux kernel's USB Type-C port handling. A local user, by unplugging a Thunderbolt dock, can trigger a race condition during the device teardown process. This can lead to a use-after-free vulnerability, where the system attempts to access memory that has already been...
JLSEC-2026-1250
A heap-based buffer overflow flaw was found in libmodbus in function modbusreply in src/modbus.c...
net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME
A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...
net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME
A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...
CVE-2026-69244
A flaw was found in AIOHTTP, an asynchronous HTTP client/server framework. This vulnerability involves an out-of-bounds heap read in the C response parser when processing malformed HTTP responses. An attacker operating a malicious server, or even an accidental malformed response, could exploit th...
Security update for xmlrpc-c
This update for xmlrpc-c fixes the following issue: CVE-2026-15928: reflected cross-site scripting XSS via HTML injection in the error page component bsc1272769. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...