5827 matches found
GHSA-HV36-P4W4-6VMJ AVideo Affected by CSRF on Plugin Import Endpoint Enables Unauthenticated Remote Code Execution via Malicious Plugin Upload
Summary The objects/pluginImport.json.php endpoint allows admin users to upload and install plugin ZIP files containing executable PHP code, but lacks any CSRF protection. Combined with the application explicitly setting session.cookiesamesite = 'None' for HTTPS connections, an unauthenticated...
DEBIAN-CVE-2026-4438
Calling gethostbyaddr or gethostbyaddrr with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 could result in an invalid DNS hostname being returned to the caller in violation of the DNS specification...
MINI-QJFM-4GQJ-5PCP
Bulletin has no description...
MINI-MX36-P6Q2-2JP2
Bulletin has no description...
MINI-JMQ3-MQ6R-4G6C
Bulletin has no description...
MINI-W98W-CHXP-F3RJ
Bulletin has no description...
MINI-Q4GW-2W2G-H57P
Bulletin has no description...
MINI-HWV3-F65P-HJRM
Bulletin has no description...
MINI-VVRJ-28PF-4PXX
Bulletin has no description...
MINI-68MM-W8Q7-4R7F
Bulletin has no description...
DEBIAN-CVE-2026-23278
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: always walk all pending catchall elements During transaction processing we might have more than one catchall element: 1 live catchall element and 1 pending element that is coming as part of the new batch. If...
DEBIAN-CVE-2026-23275
In the Linux kernel, the following vulnerability has been resolved: iouring: ensure ctx-rings is stable for task work flags manipulation If DEFERTASKRUN | SETUPTASKRUN is used and task work is added while the ring is being resized, it's possible for the OR'ing of IORINGSQTASKRUN to happen in the...
BELL-CVE-2026-27135
Bulletin has no description...
MINI-M25W-CFH4-FQQM
Bulletin has no description...
DEBIAN-CVE-2026-2369
A flaw was found in libsoup. An integer underflow vulnerability occurs when processing content with a zero-length resource, leading to a buffer overread. This can allow an attacker to potentially access sensitive information or cause an application level denial of service...
DEBIAN-CVE-2006-10003
XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in stserialstack. In the case stackptr == stacksize - 1, the stack will NOT be expanded. Then the new value will be written at location ++stackptr, which equals stacksize and therefore falls just outside the allocat...
CGA-GXCC-5R52-8XGW
Bulletin has no description...
BELL-CVE-2026-23247
Bulletin has no description...