149295 matches found
NPM: Ghost: Server-Side Request Forgery Mitigation Issue
NPM: Ghost: Server-Side Request Forgery Mitigation Issue vulnerability discovered by ? in WordPress Npm ghost versions = 6.26.0, 6.54.1...
MINI-247X-764F-QPCR
Bulletin has no description...
CVE-2026-54876
Issue summary: A malicious TLS server can cause a memory leak in a TLS client that has enabled OCSP response checking by sending an OCSP response that contains no single response entries. Impact summary: An attacker can leak an attacker-tunable amount of memory per TLS handshake in a victim clien...
DEBIAN-CVE-2026-71225
A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher Block Chaining CBC, the library improperly reuses the Initialization Vector IV for each internal data chunk. A remote attacker could...
Security update for pcp
This update for pcp fixes the following issues: CVE-2026-16524: command injection in linuxsockets PMDA via network.persocket.filter bsc1272922. CVE-2026-16526: pmdaroot privilege escalation via FDCLOEXEC fd inheritance and missing peer credentials bsc1272923. CVE-2026-16527: missing authenticatio...
CVE-2026-71281 peft Unsafe Deserialization via torch.load() Without weights_only in LoRA-GA and CorDA Modules
Hugging Face peft's LoRA-GA and CorDA initialization modules src/peft/tuners/lora/corda.py lines 102 and 163, and src/peft/tuners/lora/loraga.py line 101 call torch.load on config-specified cache/covariance files without weightsonly=True, bypassing peft's own safe-loading wrapper used elsewhere i...
CGA-9PVH-942F-PHXJ
Bulletin has no description...
CVE-2026-71238
creationtimestamp| type| source ---|---|--- 2026-08-05 11:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdgn2laot2o...
RHSA-2025:21816 Red Hat Security Advisory: delve and golang security update
Bulletin has no description...
K000162792: Numpy vulnerabilities CVE-2021-34141, CVE-2021-33430, CVE-2021-41496, CVE-2021-41495
Security Advisory Description CVE-2021-34141 An incomplete string comparison in the numpy.core component in NumPy before 1.22.0 allows attackers to trigger slightly incorrect copying by constructing specific string objects. NOTE: the vendor states that this reported code behavior is "completely...
MINI-R3M7-4CP8-VMJH
Bulletin has no description...
DEBIAN-CVE-2026-64571
In the Linux kernel, the following vulnerability has been resolved: wifi: p54: validate RX frame length in p54rxeepromreadback p54rxeepromreadback copies the requested EEPROM slice out of a device-supplied readback frame without checking that the skb actually holds that many bytes. Commit...
DEBIAN-CVE-2026-64570
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix filsdiscovery double free on alloc failure ieee80211setfilsdiscovery calls kfreercu on the old template before allocating the replacement. If the kzalloc then fails, it returns -ENOMEM while...
CVE-2026-64576
In the Linux kernel, the following vulnerability has been resolved: nexthop: initialize extack in nhresbucketmigrate nhresbucketmigrate passes an uninitialized netlinkextack to callnexthopresbucketnotifiers. When nhnotifierresbucketinfoinit fails e.g. the kzalloc returns -ENOMEM, the error is...
CVE-2026-64575
In the Linux kernel, the following vulnerability has been resolved: bpf: tcp: fix double sock release on batch realloc bpfitertcpbatch releases the current batch via bpfitertcpputbatch, which drops the socket refs and rewrites each slot with the socket cookie, then grows the batch. cursk/endsk ar...
MINI-RWHR-FPXJ-W476
Bulletin has no description...
MINI-WJ74-XP5X-4QQQ
Bulletin has no description...
MINI-2922-G8M3-XM4F
Bulletin has no description...