147411 matches found
EUVD-2025-209628
Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming...
DEBIAN-CVE-2025-70071
An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXParser.cpp, ParseVectorDataArray...
DEBIAN-CVE-2025-70070
An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXMeshGeometry.cpp, MeshGeometry::MeshGeometry...
dovecot: denial of service via specially crafted NOOP command
A flaw was found in dovecot. An unauthenticated and remote attacker can send a specially crafted "NOOP" command containing numerous open and close parentheses without a command-ending line feed, causing the server to allocate an excessive amount of memory, resulting in a denial of service...
JLSEC-2026-410
An information disclosure vulnerability exists in curl v8.1.0 when doing HTTPS transfers, libcurl might erroneously use the read callback CURLOPTREADFUNCTION to ask for data to send, even when the CURLOPTPOSTFIELDS option has been set, if the same handle previously wasused to issue a PUT request...
JLSEC-2026-432 libcurl accidentally skips the certificate verification for QUIC connections when connecting to a...
libcurl accidentally skips the certificate verification for QUIC connections when connecting to a host specified as an IP address in the URL. Therefore, it does not detect impostors or man-in-the-middle attacks...
JLSEC-2026-431 When doing SSH-based transfers using either SCP or SFTP, and asked to do public key authentication,...
When doing SSH-based transfers using either SCP or SFTP, and asked to do public key authentication, curl would wrongly still ask and authenticate using a locally running SSH agent...
JLSEC-2026-396
When doing HTTPS transfers, libcurl might erroneously use the read callback CURLOPTREADFUNCTION to ask for data to send, even when the CURLOPTPOSTFIELDS option has been set, if the same handle previously was used to issue a PUT request which used that callback. This flaw may surprise the...
JLSEC-2026-415 libcurl skips the certificate verification for a QUIC connection under certain conditions, when...
libcurl skips the certificate verification for a QUIC connection under certain conditions, when built to use wolfSSL. If told to use an unknown/bad cipher or curve, the error path accidentally skips the verification and returns OK, thus ignoring any certificate problems...
Security Bulletin:Requests SSL Verification Issue Fixed in 2.32.0
Summary Requests is a HTTP library. Prior to 2.32.0, when making requests through a Requests Session, if the first request is made with verify=False to disable cert verification, all subsequent requests to the same host will continue to ignore cert verification regardless of changes to the value ...
SUSE-SU-2026:21541-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.10.1 ESR. - MFSA 2026-36 bsc1263110 CVE-2026-7320: Information disclosure due to incorrect boundary conditions in the Audio/Video component. CVE-2026-7321: Sandbox escape due to incorrect...
Exploit for Missing Authentication for Critical Function in Cpanel
CVE-2026-41940 cPanel & WHM Verification Tool This repository...
CVE-2026-7744
creationtimestamp| type| source ---|---|--- 2026-05-04 11:06:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkzjpjuzbu2n...
SUSE-SU-2026:1671-2 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to fix one security issue The following security issue was fixed: - CVE-2026-31431: The copy.fail security issue is fixed by revert to operating out-of-place in algifaead bsc1262573...
DEBIAN-CVE-2026-43861
mutt before 2.3.2 does not check for '\0' in urlpctdecode...
UBUNTU-CVE-2026-43860
mutt before 2.3.2 sometimes truncates the hashpasswd by one byte for IMAP authcram MD5 digest...
DEBIAN-CVE-2026-43862
In mutt before 2.3.2, the imapauthgss security level is mishandled...
CVE-2026-43861
mutt before 2.3.2 does not check for '\0' in urlpctdecode...
