186671 matches found
CGA-86PX-C3X3-Q4HC
Bulletin has no description...
CVE-2026-82875
creationtimestamp| type| source ---|---|--- 2026-08-31 10:19:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/a77mhtce75pwx...
DEBIAN-CVE-2026-82677
A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandler of the file src/module.c of the component Module Timer Subsystem. This manipulation causes double free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be...
DEBIAN-CVE-2026-19873
HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements. When a Repeatable element has countername set, its process method reads the repeat count from the named query string parameter, checks only that it is ...
RHSA-2026:61251 Red Hat Security Advisory: freerdp security update
Bulletin has no description...
RHSA-2026:61245 Red Hat Security Advisory: osbuild-composer security update
Bulletin has no description...
RHSA-2026:61242 Red Hat Security Advisory: mingw-sqlite security update
Bulletin has no description...
RHSA-2026:61240 Red Hat Security Advisory: pipewire security update
Bulletin has no description...
CGA-3VG2-R297-QJVJ
Bulletin has no description...
DEBIAN-CVE-2026-82853
Nodemailer versions before 8.0.5 contain an SMTP command injection vulnerability in the transport name option used in EHLO/HELO commands. The name parameter is concatenated directly into SMTP commands without sanitizing carriage return and line feed characters, allowing attackers to inject...
DEBIAN-CVE-2026-82854
Nodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsanitized envelope.size parameter. When an application passes a custom envelope object with a size property containing CRLF characters to sendMail, the value is concatenated into the SMTP MAIL FROM command as SIZE=...
DEBIAN-CVE-2026-82659
nodemailer before 9.0.1 fails to apply disableFileAccess and disableUrlAccess flags to message-level raw option, allowing authenticated attackers to read arbitrary files or perform server-side request forgery by supplying path or href properties. Attackers can exploit this by crafting raw message...
DEBIAN-CVE-2026-82660
Nodemailer before 8.0.9 fails to enforce disableFileAccess and disableUrlAccess options during message normalization in jsonTransport. Attackers can read local files or fetch URLs by supplying path or href values in message content fields, bypassing intended access controls...
DEBIAN-CVE-2026-82661
Nodemailer before 8.0.9 fails to sanitize carriage return and line feed characters in list comment fields, allowing attackers to inject arbitrary message headers. An attacker with control over list..comment parameters can inject CRLF sequences to create additional headers in generated RFC822...
DEBIAN-CVE-2026-81624
Undertow is a flexible performant web server used in JBoss EAP and WildFly. A flaw was found in how Undertow handles WebSocket connections. Specifically, certain configuration limits like message buffer sizes and session timeouts cannot be adjusted and default to being unlimited. This allows a...
CGA-528G-79GM-2Q2C
Bulletin has no description...
DEBIAN-CVE-2026-82631
A security flaw has been discovered in valkey-io valkey 9.1.0. The affected element is the function handleClientsBlockedOnKey of the file src/blocked.c of the component Blocked-on-keys Subsystem. The manipulation results in use after free. The attack may be performed from remote. A high complexit...
CVE-2026-82628
creationtimestamp| type| source ---|---|--- 2026-08-31 07:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muef4ppacs25 2026-08-31 08:07:16+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mueh76tlu72j...