5835 matches found
DEBIAN-CVE-2026-45699
Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the copydir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for path...
DEBIAN-CVE-2026-47192
kas is a setup tool for bitbake based projects. Starting in version 4.8 and prior to version 5.3, kas checks out and processes repositories regarding configuration includes prior to validating signatures of those repositories. This may allow to replace on original repository with one under the...
DEBIAN-CVE-2026-48702
Rekor is a software supply chain transparency log. Starting in version 0.3.0 and prior to version 1.5.2, the Package.Unmarshal function in pkg/types/alpine/apk.go decompresses the signature and control gzip members of an APK file into in-memory buffers without bounding the total decompressed size...
MINI-852J-MQ6W-2JRF
Bulletin has no description...
CVE-2026-21079
Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data...
DEBIAN-CVE-2026-12570
A vulnerability in keras-team/keras versions = 3.15.0 allows for a denial of service DoS attack when loading malicious .keras model files via the keras.models.loadmodel function. The H5IOStore.getitem method in keras/src/saving/savinglib.py does not validate the shape or size of datasets, leading...
MINI-WXHQ-354P-7M55
Bulletin has no description...
MINI-594V-6X42-634F
Bulletin has no description...
MINI-524G-P9J3-426X
Bulletin has no description...
MINI-GGFG-253G-P27J
Bulletin has no description...
RHSA-2026:38511 Red Hat Security Advisory: vim security update
Bulletin has no description...
BELL-CVE-2026-32327
Bulletin has no description...
MINI-GPHH-HFH7-VP87
Bulletin has no description...
MINI-365R-85RP-H8VM
Bulletin has no description...
CVE-2026-16594
The WP Directory Kit WordPress plugin before 1.5.5 does not perform authorization or nonce checks on one of its authenticated AJAX actions, allowing any authenticated user such as a Subscriber to disclose the WP Directory Kit WordPress plugin before 1.5.5 settings including sensitive API keys and...
CGA-XJ99-HXM7-J359
Bulletin has no description...
DEBIAN-CVE-2026-56818
Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, the RedisArrayAggregator Redis codec clears retained partial aggregate state when the maxNestedArrayDepth limit is exceeded, but it does not clear the same state when the sibling...
DEBIAN-CVE-2026-19082
Imager versions from 0.4502 before 1.034 for Perl may expose adjacent heap bytes via strlen over-read from zero-count ASCII EXIF entries in copystringtags. copystringtags computes an ASCII EXIF tag's length as entry-size - 1 to strip the trailing NUL. A zero-count ASCII entry sets entry-size to 0...