872974 matches found
Google Chrome Microsoft Edge DoS
The vulnerability in the JavaScript script handler of Google Chrome and Microsoft Edge browsers is related to data type conversion errors. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by using a specially crafted HTML page...
CVE-2026-118669
OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. Prior to 4.0.0, the clientcredentials and Resource Owner Password Credentials token grant handlers can authenticate request.client as one confidential client while retaining an attacker-supplied request.clientid for...
UBUNTU-CVE-2026-119194
pyasn1 is a generic ASN.1 library for Python. From 0.3.3 until 0.6.5, schemaless container decoding stores every decoded component's TagSet in a growing set even though only one-versus-multiple tag types must be distinguished. Attacker-controlled BER, CER, or DER input contains many distinct long...
Fedora 44 : trafficserver (2026-56b692bd7b)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-56b692bd7b advisory. Changes with Apache Traffic Server 10.2.1 13553 - originserverauth: Improve log messages 13567 - Metrics: Revert added locking and annotations 13505 - Add...
UBUNTU-CVE-2026-118778
Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used forge.tls.createConnection, c.session.serverCertificate, RSA key exchange to process the relevant input or security decision. node-forge's TLS client...
CVE-2026-62284: osac-project osac-operator: OSAC operator is a Kubernetes operator
OSAC operator is a Kubernetes operator. In the affected revision identified as 8220502, the console-proxy RemoteConfigResolver parses Kubernetes Secret kubeconfig data with clientcmd.RESTConfigFromKubeConfig without sanitizing the resulting rest.Config. An attacker who can create or modify a Secr...
UBUNTU-CVE-2026-119191
Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used asn1.fromDer, BIT STRING decoding, maxDepth to process the relevant input or security decision. node-forge decoded ASN.1 stored inside BIT STRING...
UBUNTU-CVE-2026-119207
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive memory when strict mode loads a crafted invalid PDF dictionary. Nested parsing failures add repeated exception text to newly raised errors, allowing a small malformed dictionary to amplify into...
UBUNTU-CVE-2026-118779
Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affected implementation used pem.decode, lib/pem.js, missing END line to process the relevant input or security decision. node-forge used polynomial-time regular expressions in...
CentOS Linux 7 [TuxCare] Security Update: libssh2 / libssh2-devel / libssh2-docs (CENTOS7:CLSA-2026:1793099211)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1793099211 advisory. - libssh2 through 1.11.1, fixed in commit 2dae302, contains an out-of-bounds heap read vulnerability in the sftpsymlink function in src/sftp.c th...
CVE-2026-118475
A flaw was found in Eye of GNOME. When parsing a specially crafted PNG image containing malformed color profile metadata, the application fails to validate chunk boundaries while searching for a null terminator. An attacker could trick a user into opening a malicious image, causing the applicatio...
CGA-77CM-X67G-36FP
Bulletin has no description...
CGA-2VXF-XC7X-QCM7
Bulletin has no description...
CGA-R88J-MM4C-XW7F
Bulletin has no description...
CGA-2XH9-H4QX-GGRX
Bulletin has no description...
CGA-V4VG-QG79-87CQ
Bulletin has no description...
CGA-MMF6-WMHF-5MQ7
Bulletin has no description...
CGA-9CCM-VJ3F-VWF5
Bulletin has no description...