54830 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-74557
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer iscsiscsicmdrsp copies the sense data of a SCSI Response from the target-supplied data segment...
PT-2026-72884
Uncontrolled resource consumption vulnerability in Apache Struts. An application that exposes an endpoint collecting Content Security Policy violation reports reads the submitted report into memory without bounding how much it will accept, so a single request can exhaust the heap and deny service...
PT-2026-72825
In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix log flood after cmd mbox failure hns roce cmd mbox is the command interface between driver and hardware. When hardware is abnormal, the unlimited error printings after hns roce cmd mbox failure will cause log flood...
PT-2026-72653
In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Sanitize the reply credit grant after parsing The out norqst exit in rpcrdma reply handler branches away before the credit clamp, so a reply that matches no pending request reaches out post carrying the raw credit value...
SUSE CVE-2026-56859
Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...
SUSE CVE-2026-56862
Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely...
MINI-C933-QCR8-QMR4
Bulletin has no description...
CVE-2026-74243
In Red Hat Quay, when SECURITY_SCANNER_V4_PSK is not configured, unauthenticated attackers can flood the notification queue and inject path traversal characters into Clair API URLs, causing worker resource exhaustion and blind path manipulation on the Clair host. Mitigation: set the pre-shared ke...
MINI-FWRF-5JC7-5HHV
Bulletin has no description...
cryprot-net (0.1.0), dbx-core (>=0.2.0-beta, <=0.2.2) +4 more potentially affected by CVE-2026-10740 via s2n-quic (1.37.0)
s2n-quic CARGO version 1.37.0 is affected by a known vulnerability. The following packages have a transitive dependency on s2n-quic and may be impacted: - cryprot-net 0.1.0 - dbx-core =0.2.0-beta, =0.2.0-beta, =0.10.0, =0.1.0, =0.1.0, =0.2.2 Source cves: CVE-2026-10740 Source advisory:...
MINI-76XM-3WQ4-FPXR
Bulletin has no description...
MINI-HV9G-WXQ9-GPQM
Bulletin has no description...
MINI-3C24-73VQ-2H6C
Bulletin has no description...
MINI-W4W4-CF6Q-QVFJ
Bulletin has no description...
CVE-2026-71312 vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-71313 vulnerabilities
Vulnerabilities for packages: telegraf...
GHSA-GX4C-2HQX-CW2R vulnerabilities
Vulnerabilities for packages: telegraf...
MINI-JJC2-4QF3-W2J6
Bulletin has no description...