312599 matches found
Important: Red Hat Security Advisory: curl security update
An update for curl is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
kernel: Arm Processors: Privilege escalation or information disclosure via writes to higher exception level resources
A flaw was found in the Linux kernel on ARM processors. A race condition in Translation Lookaside Buffer Invalidation TLBI operations during memory permission changes allows a local attacker to write to memory resources owned by higher privilege levels. This could allow an unprivileged local...
CVE-2026-19969
A flaw was found in Open Asset Import Library Assimp. A buffer overflow vulnerability exists in the GenerateOutputMeshes3DGSMDL7 function when processing 3DGS MDL7 models. A remote attacker could exploit this to cause a denial of service or potentially disclose sensitive information...
gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux FUJIFILM strd parsing leading to out-of-bounds read/write
A flaw was found in GStreamer gst-plugins-good avidemux. When parsing FUJIFILM metadata in an AVI strd chunk, gstavidemuxparsestrd decrements a remaining-length counter by fixed offsets 98 and 10 bytes without verifying sufficient data remains. For crafted strd payloads of exactly 106 or 107 byte...
MINI-QVCP-G74M-VQX9
Bulletin has no description...
MINI-FV7X-HWF3-W93G
Bulletin has no description...
MINI-6RRP-65MC-GF26
Bulletin has no description...
MINI-FQVM-3WHV-PVMW
Bulletin has no description...
MINI-486Q-C5C7-P7RH
Bulletin has no description...
MINI-VFRJ-R9W8-43QW
Bulletin has no description...
MINI-QX59-63Q9-XMM2
Bulletin has no description...
MINI-3C85-HV46-C5G6
Bulletin has no description...
MINI-P338-JCXJ-XM9C
Bulletin has no description...
MINI-8FVP-8GC8-GQ83
Bulletin has no description...
MINI-67WR-P5XW-7349
Bulletin has no description...
MINI-RQXP-WWXH-CJFQ
Bulletin has no description...
CVE-2026-19965 automad Password Reset Endpoint UserController.php requestPasswordResetToken response discrepancy
A vulnerability was determined in automad up to 2.0.0-beta.32. This vulnerability affects the function requestPasswordResetToken of the file automad/src/server/Controllers/API/UserController.php of the component Password Reset Endpoint. This manipulation of the argument name-or-email causes...
PT-2026-73181
A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8. This issue affects some unknown processing of the file /clients/save contact of the component Contact Information Update. Such manipulation of the argument contact id leads to authorization bypass. The attack can...
PT-2026-76686
PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.18, lib/previous-map.js loadMap passes attacker-controlled sourceMappingURL values to joindirnameopts.from, annotation, and loadFile permits traversed ...