6071 matches found
SUSE CVE-2026-53208
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: reject BR/EDR signaling packets over MTUsig net/bluetooth/l2capcore.c:l2capsigchannel accepts BR/EDR signaling packets up to the channel MTU and dispatches each command without enforcing the signaling MTU MTUsig...
SUSE CVE-2026-53246
In the Linux kernel, the following vulnerability has been resolved: sctp: validate cached peer INIT chunk length in COOKIEECHO processing When a listening SCTP server processes a COOKIEECHO chunk, the cached peer INIT chunk embedded after the cookie is parsed and its parameters are later walked b...
CVE-2026-55677: Improper Limitation of a Pathname to a Restricted Directory
Echo is a Go web framework. Prior to 4.15.3 and 5.2.0, Echo's router and static file handler disagree on URL path decoding. The router matches routes using the raw encoded path preserving %2F as-is, while StaticDirectoryHandler unescapes %2F to / before resolving filesystem paths. This allows an...
PT-2026-52855
Name of the Vulnerable Software and Affected Versions Echo versions prior to 4.15.3 Echo versions prior to 5.2.0 Description A discrepancy exists between the router and the static file handler regarding URL path decoding. The router matches routes using the raw encoded path, preserving %2F as-is,...
CVE-2026-53246
A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. A remote attacker could exploit this by sending a specially crafted COOKIEECHO chunk to a listening SCTP server. The server's failure to properly validate the length of a cached peer INIT chunk within...
GO-2026-5560 podinfo: cross-site scripting vulnerability in the /echo and /api/echo endpoints in github.com/stefanprodan/podinfo
podinfo: cross-site scripting vulnerability in the /echo and /api/echo endpoints in github.com/stefanprodan/podinfo...
GO-2026-5541 Ech0 allows PUT /api/echo/like/:id unauthenticated: anonymous callers to modify any echo's fav_count in github.com/lin-snow/ech0
Ech0 allows PUT /api/echo/like/:id unauthenticated: anonymous callers to modify any echo's favcount in github.com/lin-snow/ech0...
ECHO-3F7B-72B2-7290 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-8B6A-5F3C-8FEC Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-82CA-920D-21DB Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-4E4C-AB6B-9262 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-3A55-5E38-D5A9 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-BC06-2EFA-A4C6 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-17E7-88DB-7B3E Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-5AA5-33C7-320E Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-26CE-35A4-AFF5 Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-BA40-29C2-3EDA Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...
ECHO-2830-C2E0-00DB Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...