146568 matches found
CVE-2026-51271
creationtimestamp| type| source ---|---|--- 2026-07-28 20:18:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqa6nmou724 2026-07-29 09:14:39+00:00| seen| https://gist.github.com/programmervuln/18c03cd805634bd9456d90c007a00b27 2026-07-29 16:03:17+00:00| seen|...
CVE-2026-55554
Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, the validateLocalUri method enforces chroot boundaries with a strpos prefix check after normalizing paths with realpath . Because normalization strips the trailing directory separator from $chrootPath , the check only...
MINI-89HC-6J8F-3JJG
Bulletin has no description...
DEBIAN-CVE-2026-54619
sqlite3 provides Ruby bindings for the SQLite3 embedded database. In version 2.9.4 and earlier, redefining a SQLite function with a different arity frees the previously registered function handler while SQLite may still reference it, resulting in a use-after-free. This issue is fixed in version...
SUSE CVE-2026-64555
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Fix SPSREL2 restore in kvmhyphandlemops kvmhyphandlemops resets the single-step state machine as part of rewinding state for a MOPS exception by modifying vcpucpsr and writing the result directly into hardware. In...
Security update for the Linux Kernel (Live Patch 18 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.66 fixes various security issues: The following security issues were fixed: CVE-2026-53366: ipv4: account for fraggap on the paged allocation path bsc1271370. Patch Instructions: To install this SUSE update use the SUSE recommended...
sqlite3-ruby has Use-After-Free When Redefining SQLite Functions with Different Arity
Summary Using Databasecreatefunction or Databasedefinefunction to define the same function name more than once with different numbers of arguments "arity" or text encodings will result in a invalid memory read and a segmentation fault. Mitigation Upgrade to sqlite3 gem v2.9.5 or later. As a...
ROOT-OS-UBUNTU-2404-CVE-2025-38500 CVE-2025-38500 in rootio-linux - Patched by Root
Root has patched CVE-2025-38500 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-39826 CVE-2025-39826 in rootio-linux - Patched by Root
Root has patched CVE-2025-39826 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-23148 CVE-2025-23148 in rootio-linux - Patched by Root
Root has patched CVE-2025-23148 in the rootio-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
DEBIAN-CVE-2026-6949
Bulletin has no description...
PSF-2026-34
Element.findall and fully-consumed Element.iterfind exhibit On^2 time complexity when using XPath index predicates e.g. 1, last, last-N on XML documents with many same-tag siblings. Element.find is only affected when the first match is near the end of the sibling list, such as with last or...
MINI-FCRG-9V25-W2PR
Bulletin has no description...
MINI-8XJ9-24F4-8M83
Bulletin has no description...
MINI-PM2C-Q6X5-X295
Bulletin has no description...
MINI-JR82-H22Q-GH6R
Bulletin has no description...
CVE-2026-62435
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. With the introduction of Grant Table v2 came the requirement to be able to switch between versions. Switching from v1 to v2 reduces the number of valid grant references, ...
DEBIAN-CVE-2026-62428
When grant-copy operations are processed, the respective grant may or may not already be in use by another operation a mapping or another copy. For all copy operations the referenced guest frame is looked up. When another operation is already active for the grant the grant is "pinned", what is...