603 matches found
GHSA-2328-F5F3-GJ25 Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)
Summary pki.verifyCertificateChain does not enforce RFC 5280 basicConstraints requirements when an intermediate certificate lacks both the basicConstraints and keyUsage extensions. This allows any leaf certificate without these extensions to act as a CA and sign other certificates, which node-for...
BELL-CVE-2026-21713
Bulletin has no description...
BELL-CVE-2026-23389
Bulletin has no description...
CGA-F43X-F635-VFQ3
Bulletin has no description...
DEBIAN-CVE-2026-4694
Incorrect boundary conditions, integer overflow in the Graphics component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...
DEBIAN-CVE-2026-4751
NULL Pointer Dereference vulnerability in tmate-io tmate.This issue affects tmate: before 2.4.0...
MINI-C2XC-PVVC-G64H
Bulletin has no description...
AVideo has a PGP 2FA Bypass via Cryptographically Broken 512-bit RSA Key Generation in LoginControl Plugin
Summary The createKeys function in the LoginControl plugin's PGP 2FA system generates 512-bit RSA keys, which have been publicly factorable since 1999. An attacker who obtains a target user's public key can factor the 512-bit RSA modulus on commodity hardware in hours, derive the complete private...
CVE-2025-15540
Raytha CMS is affected by CVE-2025-15540 in the Functions module. Privileged users can write and execute JavaScript that can instantiate .NET components and perform arbitrary operations within the hosting environment due to insufficient sandboxing/access restrictions. Impact is described as authe...
MINI-48VG-6499-V62V
Bulletin has no description...
MINI-GR34-GG4Q-8P8R
Bulletin has no description...
MINI-J948-P24M-7RGH
Bulletin has no description...
CVE-2026-3582
CVE-2026-3582 affects GitHub Enterprise Server. An Incorrect Authorization vulnerability allowed an authenticated user with a classic PAT lacking the repo scope to retrieve issues and commits from private/internal repositories via the search REST API, provided the user already had access to the r...
MINI-QP5W-R555-6HQP
Bulletin has no description...
MINI-Q889-598F-FXR4
Bulletin has no description...
MINI-G5PP-R957-3CR7
Bulletin has no description...
MINI-FX3C-GG8H-J27C
Bulletin has no description...
MINI-5XRG-W8GR-VGX8
Bulletin has no description...