578 matches found
CVE-2026-18819
RackTables
DEBIAN-CVE-2026-47763
pdm is a Python package and dependency manager supporting the latest PEP standards. In versions prior to 2.27.0, pdm writes several project-local state or configuration files without symlink protection. If a malicious repository places those files as symlinks, local PDM operations can overwrite t...
DEBIAN-CVE-2026-53503
Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor's filters:convolution, , filter passes the user-controlled value to a C extension thumbor/ext/filters/convolution.c where it is used as a divisor for % and / without validating columns 0. When columns=0, the C...
MINI-7CR2-F6G7-H9CH
Bulletin has no description...
CVE-2026-54367
CentreStack before 17.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to read, write, or delete arbitrary account settings by exploiting exposed API endpoints that lack authorization checks. Attackers can generate valid encrypted EntAcctId values using the...
DEBIAN-CVE-2026-58177
The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-free errors. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 10.1.4, which fix the issue...
BELL-CVE-2026-64410 CVE-2026-64410 does not affect BellSoft software
Bulletin has no description...
MINI-H52V-FMQJ-9C6M
Bulletin has no description...
MINI-H6MW-FXC4-8PVX
Bulletin has no description...
CVE-2026-12991
The lack of cryptographic mechanisms to ensure the integrity and authenticity of communications in Ghost Robotics' Vision 60 robot APK v5.5.0 exposes the system to man-in-the-middle attacks. An attacker located on the local network can use ARP spoofing and selective traffic blocking techniques to...
MINI-J2RX-452F-R3PJ
Bulletin has no description...
MINI-3769-23WW-7J8H
Bulletin has no description...
DEBIAN-CVE-2026-64465
In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix sleep in atomic context in xhcifreestreams When a USB device with active stream endpoints is disconnected, xhcifreestreams is called from the hubevent workqueue to free the stream resources. It calls...
DEBIAN-CVE-2026-64439
In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out async aead implementations at alloc krb5aeadencrypt, krb5aeaddecrypt in rfc3961simplified.c and rfc8009encrypt, rfc8009decrypt in rfc8009aes2.c set a NULL completion callback and treat any negative retur...
CGA-7F54-J9QG-6RVJ
Bulletin has no description...
MINI-G6H8-29GV-GFVH
Bulletin has no description...
MINI-QF7W-XJ9R-GMXW
Bulletin has no description...
MINI-7V8F-5MVP-5G8J
Bulletin has no description...