186779 matches found
CVE-2026-73546
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's /stats?format=html admin endpoint uses StatsHtmlRender, which sanitizes string statistic values but emits statistic names without HTML encoding. A data-plan...
CVE-2026-73513
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's optional oghttp2 upstream HTTP/2 codec accepts a response trailer HEADERS frame without ENDSTREAM. Envoy completes and deferred-deletes the ActiveRequest...
CVE-2026-73512
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's HttpDatagramHandler caches the current RequestDecoder when Capsule Protocol is enabled. Stream recreation, including an internal redirect, replaces the...
MINI-7263-VJHR-273W
Bulletin has no description...
ECHO-1C69-349A-B2EE
Bulletin has no description...
CGA-4RH7-CXJP-CG7P
Bulletin has no description...
DEBIAN-CVE-2026-78422
Subject::newforowner in the zbuspolkit crate encodes the uid entry of a unix-process polkit subject as an unsigned 32-bit integer D-Bus type u, whereas the org.freedesktop.PolicyKit1.Authority interface specifies a signed 32-bit integer D-Bus type i. Because of this type mismatch, polkit silently...
CGA-3WGQ-JCP9-Q8MM
Bulletin has no description...
CGA-6W6X-79V6-VMVQ
Bulletin has no description...
CGA-MX67-F7JR-JC7J
Bulletin has no description...
CVE-2026-80221
No description is available for this CVE...
CVE-2026-80220
No description is available for this CVE...
CVE-2026-77849
No description is available for this CVE...
CVE-2026-75762
No description is available for this CVE...
CGA-6RGW-GR7M-C6Q6
Bulletin has no description...
CGA-86PX-C3X3-Q4HC
Bulletin has no description...
CVE-2026-82875
creationtimestamp| type| source ---|---|--- 2026-08-31 10:19:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/a77mhtce75pwx...
DEBIAN-CVE-2026-82677
A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandler of the file src/module.c of the component Module Timer Subsystem. This manipulation causes double free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be...
DEBIAN-CVE-2026-19873
HTML::FormFu versions through 2.08 for Perl allow resource exhaustion via an unbounded repeat count from the query string in Repeatable elements. When a Repeatable element has countername set, its process method reads the repeat count from the named query string parameter, checks only that it is ...