354 matches found
DEBIAN-CVE-2026-47763
pdm is a Python package and dependency manager supporting the latest PEP standards. In versions prior to 2.27.0, pdm writes several project-local state or configuration files without symlink protection. If a malicious repository places those files as symlinks, local PDM operations can overwrite t...
DEBIAN-CVE-2026-53503
Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor's filters:convolution, , filter passes the user-controlled value to a C extension thumbor/ext/filters/convolution.c where it is used as a divisor for % and / without validating columns 0. When columns=0, the C...
DEBIAN-CVE-2026-58177
The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-free errors. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 10.1.4, which fix the issue...
BELL-CVE-2026-64410 CVE-2026-64410 does not affect BellSoft software
Bulletin has no description...
MINI-H52V-FMQJ-9C6M
Bulletin has no description...
MINI-H6MW-FXC4-8PVX
Bulletin has no description...
MINI-J2RX-452F-R3PJ
Bulletin has no description...
DEBIAN-CVE-2026-64465
In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix sleep in atomic context in xhcifreestreams When a USB device with active stream endpoints is disconnected, xhcifreestreams is called from the hubevent workqueue to free the stream resources. It calls...
DEBIAN-CVE-2026-64439
In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter out async aead implementations at alloc krb5aeadencrypt, krb5aeaddecrypt in rfc3961simplified.c and rfc8009encrypt, rfc8009decrypt in rfc8009aes2.c set a NULL completion callback and treat any negative retur...
CGA-7F54-J9QG-6RVJ
Bulletin has no description...
MINI-G6H8-29GV-GFVH
Bulletin has no description...
MINI-QF7W-XJ9R-GMXW
Bulletin has no description...
MINI-7V8F-5MVP-5G8J
Bulletin has no description...
MINI-22R6-MJ52-7H6R
Bulletin has no description...
MINI-W54P-PGWJ-H48J
Bulletin has no description...
DEBIAN-CVE-2026-50584
Bulletin has no description...
DEBIAN-CVE-2026-50588
Bulletin has no description...
BELL-CVE-2026-63817
Bulletin has no description...
DEBIAN-CVE-2026-9499
An out-of-bounds read buffer over-read vulnerability exists in QTextCodec::codecForName in Qt. When the function is called with a QByteArray that is not NUL-terminated for example, one created with QByteArray::fromRawData, the codec-name matching routine reads past the end of the supplied buffer...