603 matches found
CVE-2026-65062
Data::SortedSet::Shared versions before 0.03 for Perl create a world-readable mmap backing file and open it without OEXCL or ONOFOLLOW. The segment is created in sortedset.h with openpath, ORDWR|OCREAT, 0666. The mode is 0666, so under the default umask 022 the file is created mode 0644...
DEBIAN-CVE-2026-9499
An out-of-bounds read buffer over-read vulnerability exists in QTextCodec::codecForName in Qt. When the function is called with a QByteArray that is not NUL-terminated for example, one created with QByteArray::fromRawData, the codec-name matching routine reads past the end of the supplied buffer...
MINI-G5PC-R32W-FFWJ
Bulletin has no description...
DEBIAN-CVE-2026-54538
xrdp is an open source RDP server. In versions 0.10.6 and prior, a n issue was discovered where the software fails to properly validate the totalLength field within the RDP protocol control header during packet reception. An unauthenticated remote attacker can exploit this vulnerability by sendin...
MINI-7R5M-CVWF-9RPW
Bulletin has no description...
DEBIAN-CVE-2026-15043
DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted = SQL operators on text. DBI::SQL::Nano, DBI's built-in mini-SQL engine, evaluated WHERE predicates incorrectly in some cases. In the non-numeric string branch of the ismatched method, = was evaluated using Perl's le operator...
MINI-9284-WGRX-6W3X
Bulletin has no description...
MINI-35VP-4489-FXPF
Bulletin has no description...
MINI-G77Q-2GGW-6H5W
Bulletin has no description...
CVE-2026-61428 PraisonAI AgentMail before 4.6.78 Message Injection via Webhook
PraisonAI AgentMail versions before 4.6.78 lack signature verification in webhook mode, allowing unauthenticated attackers to inject messages with spoofed sender addresses. Attackers can POST crafted message.received events to the webhook endpoint to inject arbitrary content into the agent and...
MINI-Q3QQ-448V-P5FH
Bulletin has no description...
MINI-W99R-673J-MCCW
Bulletin has no description...
MINI-7VPJ-2C6V-V77R
Bulletin has no description...
MINI-GPXX-7573-5M4X
Bulletin has no description...
MINI-XMPV-9P95-C8Q9
Bulletin has no description...
MINI-G83C-QWF8-P5C3
Bulletin has no description...
MINI-32V8-R28H-V55G
Bulletin has no description...
MINI-RP7P-6356-J7HC
Bulletin has no description...
CVE-2026-57244
After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle verification, resulting in the failure of the control pointer during the traversal process. After the pointer fails, it still continues to dereference, causing the application to crash...