GHSA-82W2-X7HF-5H8R vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

CVE-2026-28755 vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

GHSA-GGR6-FMR8-2M8G vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

MINI-PHCQ-V7R9-2XGM

Bulletin has no description...

MINI-2G3X-3F79-GG59

Bulletin has no description...

MINI-R5VG-JJX2-6FWX

Bulletin has no description...

MINI-P6R8-PWJ3-4C8Q

Bulletin has no description...

MINI-Q5H2-722C-5RP3

Bulletin has no description...

MINI-5HC8-F4PG-V75V

Bulletin has no description...

MINI-6WMP-4M4Q-G848

Bulletin has no description...

MINI-VJ43-6953-J899

Bulletin has no description...

MINI-68GG-W36M-4FC9

Bulletin has no description...

MINI-89V4-GJ6V-PGX2

Bulletin has no description...

MINI-6662-994M-R56R

Bulletin has no description...

MINI-HQP6-2X3C-Q3JC

Bulletin has no description...

CVE-2026-50776

Directory Traversal vulnerability in Pronis Loisirs Billetterie CSE - 04/2026 allows a remote attacker to obtain sensitive information and execute arbitrary code...

kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()

A flaw was found in the Linux kernel's IPv6 ICMP error generation. A remote attacker could send a specially crafted IPv4 ICMP error packet with a Common Internet Protocol Security Option CIPSO IP option. This could lead to incorrect handling of packet control block data when generating an IPv6 IC...

GHSA-8C42-7QJ2-3J46 Netty Vulnerable to Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite

Summary Netty's CorsHandler silently overwrites existing Vary headers, enabling cache poisoning and sensitive information disclosure. Details io.netty.handler.codec.http.cors.CorsHandlersetVaryHeader overwrites any existing Vary headers set by backend applications. java private static void...

Netty Vulnerable to Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite

Summary Netty's CorsHandler silently overwrites existing Vary headers, enabling cache poisoning and sensitive information disclosure. Details io.netty.handler.codec.http.cors.CorsHandlersetVaryHeader overwrites any existing Vary headers set by backend applications. java private static void...

CVE-2026-68520

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, asdictsecure in glances/config.py checks only option names and exposes publicusername and credentials embedded in publicapi values through unauthenticated GET /api/4/config and GET /api/4/config/ip requests. This iss...