11966 matches found
ECHO-14A8-C7C0-3DA6 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
MINI-2GGG-F5CG-3J8M
Bulletin has no description...
MINI-42VJ-G83J-QXJ4
Bulletin has no description...
CVE-2026-48695
FastNetMon Community Edition through 1.2.9 contains an OS command injection vulnerability in the MikroTik router integration plugin. The log function in src/mikrotikplugin/fastnetmonmikrotik.php lines 107-108 constructs shell commands by concatenating the $msg parameter directly into exec calls:...
MINI-3824-27WJ-RPC5
Bulletin has no description...
MINI-WVWW-XG55-6WHP
Bulletin has no description...
MINI-36XH-993F-MQHF
Bulletin has no description...
MINI-6MQQ-WRVH-H25X
Bulletin has no description...
MINI-CVCG-VM2C-M25Q
Bulletin has no description...
MINI-8CX2-X2F4-R52H
Bulletin has no description...
ECHO-F759-D499-AD5C DoS (bandwidth consumption) via a Range header specifying multiple copies of the same fragment over a TCP connection with a large window size. The severity is explicitly disputed by third parties (NVD carries the "disputed" tag) because the large TCP window size the attack relies on is not normally supported or configured by the server, and the same effect is achievable by simply downloading the file. Red Hat states it "does not consider this issue to be a security vulnerability". Debian classifies it as an unimportant issue. No code change required in the shipped 2.4.68 build. https://security-tracker.debian.org/tracker/CVE-2007-0086
Bulletin has no description...
ECHO-70E5-DF73-C55E
Bulletin has no description...
DEBIAN-CVE-2026-46221
In the Linux kernel, the following vulnerability has been resolved: EDAC/versalnet: Fix device name memory leak The device name allocated via kzalloc in initonemc is assigned to dev-initname but never freed on the normal removal path. deviceregister copies initname and then sets dev-initname to...
DEBIAN-CVE-2026-46185
In the Linux kernel, the following vulnerability has been resolved: smb/client: fix out-of-bounds read in symlinkdata Since smb2checkmessage returns success without length validation for the symlink error response, in symlinkdata it is possible for iov-iovlen to be smaller than sizeofstruct...
DEBIAN-CVE-2026-46177
In the Linux kernel, the following vulnerability has been resolved: ipmi: Add limits to event and receive message requests The driver would just fetch events and receive messages until the BMC said it was done. To avoid issues with BMCs that never say they are done, add a limit of 10 fetches at a...
DEBIAN-CVE-2026-46180
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential use-after-free issue when stopping watchdog task Watchdog task might end between sendsig and kthreadstop calls, what results in the use-after-free issue. Fix this by increasing watchdog task referenc...
DEBIAN-CVE-2026-46150
In the Linux kernel, the following vulnerability has been resolved: fanotify: fix false positive on permission events fsnotifygetmarksafe may return false for a mark on an unrelated group, which results in bypassing the permission check. Fix by skipping over detached marks that are not in the...
DEBIAN-CVE-2026-46124
In the Linux kernel, the following vulnerability has been resolved: isofs: validate block number from NFS file handle in isofsexportiget isofsfhtodentry and isofsfhtoparent pass an attacker- controlled block number ifid-block or ifid-parentblock from the NFS file handle to isofsexportiget, which...
DEBIAN-CVE-2026-46119
In the Linux kernel, the following vulnerability has been resolved: libceph: Fix slab-out-of-bounds access in auth message processing If a potentially corrupted message of type CEPHMSGAUTHREPLY contains a positive value in its result field, it is treated as an error code by cephhandleauthreply an...