10740 matches found
MINI-8HP2-QFPF-W4FG
Bulletin has no description...
MINI-6R69-332C-HVW4
Bulletin has no description...
MINI-MM37-MGPV-VR29
Bulletin has no description...
CGA-5PRX-QG89-R4R8
Bulletin has no description...
CGA-C62R-25JR-FMQG
Bulletin has no description...
ECHO-94BD-88BB-49FE
Bulletin has no description...
ECHO-469F-CB12-A292
Bulletin has no description...
ECHO-BA9E-EE69-2AC3
Bulletin has no description...
ECHO-BD26-AB2E-1D6D
Bulletin has no description...
Chromium: CVE-2026-9878 Use after free in ANGLE
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
GHSA-4GG8-GXPX-9RPH uv is vulnerable to arbitrary file write through entry point names
Impact In versions of uv prior to 0.11.15, when installing a distribution containing an entry point specification under consolescripts or guiscripts, uv would place the generated entry point according to the given name even if doing so resulted in a path outside of the environment's scripts...
uv is vulnerable to arbitrary file write through entry point names
Impact In versions of uv prior to 0.11.15, when installing a distribution containing an entry point specification under consolescripts or guiscripts, uv would place the generated entry point according to the given name even if doing so resulted in a path outside of the environment's scripts...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal in the processing of uploaded filenames containing Windows-style path separators. An attacker can write arbitrary files outside the intended extraction directory on Windows systems by crafting a malicious filename in...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal in the processing of uploaded filenames containing Windows-style path separators. An attacker can write arbitrary files outside the intended extraction directory on Windows systems by crafting a malicious filename in...
Gotenberg has path traversal in zip entry name via Windows-style separators in upload filename
Summary filepath.Base on the Linux container does not strip backslashes , because \ is only a path separator on Windows. A multipart filename like ........\Windows\System32\evil.pdf survives Gotenberg's input sanitisation and lands verbatim as the zip entry name when a multi-output route...
MINI-3R62-HC24-GRFG
Bulletin has no description...
CVE-2026-49318 Indian Scout Bobber 2025 Infotainment Digital Round skips PIN entry when WCM is silent at boot
Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the PIN entry screen. The Infotainment uses presence of Wireless Control Module WCM traffic during its boot window as a...
CGA-6FR6-PQR9-99FV
Bulletin has no description...
