184 matches found
DEBIAN-CVE-2026-31734
In the Linux kernel, the following vulnerability has been resolved: schedext: Fix isbpfmigrationdisabled false negative on non-PREEMPTRCU Since commit 8e4f0b1ebcf2 "bpf: use rcureadlockdontmigrate for trampoline.c", the BPF prolog bpfprogenter calls migratedisable only when CONFIGPREEMPTRCU is...
UBUNTU-CVE-2026-31759
In the Linux kernel, the following vulnerability has been resolved: usb: ulpi: fix double free in ulpiregisterinterface error path When deviceregister fails, ulpiregister calls putdevice on ulpi-dev. The device release callback ulpidevrelease drops the OF node reference and frees ulpi, but the...
RHSA-2026:10949 Red Hat Security Advisory: python3.9 security update
Bulletin has no description...
CVE-2026-40333 libgphoto2 has OOB read in ptp_unpack_EOS_ImageFormat() and ptp_unpack_EOS_CustomFuncEx() due to missing length parameter in ptp-pack.c
libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, two functions in camlibs/ptp2/ptp-pack.c accept a data pointer but no length parameter, performing unbounded reads. Their callers in ptpunpackEOSevents have xsize available but never pass it, leaving both...
MINI-Q54M-8JFW-FCCJ
Bulletin has no description...
MINI-HG5W-RPCX-GX22
Bulletin has no description...
Security Bulletin: Vulnerability in libssh library (CVE-2025-5372) affects Power HMC.
Summary The libssh library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2025-5372 DESCRIPTION: A flaw was found in libssh versions built with OpenSSL versions older than 3.0, specifically in the sshkdf function responsible...
BELL-CVE-2026-23343
Bulletin has no description...
BIT-LIBPYTHON-2026-4519 webbrowser.open() allows leading dashes in URLs
The webbrowser.open API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading dashes. Users are recommended to sanitize URLs prior to passing to webbrowser.open...
BELL-CVE-2026-33412
Bulletin has no description...
RLSA-2023:5537 Important: libvpx security update
The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format. Security Fixes: libvpx: Heap buffer overflow in vp8 encoding in libvpx CVE-2023-5217 libvpx: crash related to VP9 encoding in libvp...
RHSA-2026:4440 Red Hat Security Advisory: freerdp security update
Bulletin has no description...
UBUNTU-CVE-2026-26131
Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally...
MINI-V47M-3GW4-XPJM
Bulletin has no description...
CLSA-2026-1771236630 nodejs: Fix of CVE-2026-21637
CVE-2026-21637: route callback exceptions through error handlers...
CVE-2026-0964
A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory. This could be misused to create malicious executable or configuration files and make the user execute them under specific consequences. This is the same issue...
CVE-2023-40204
Unrestricted Upload of File with Dangerous Type vulnerability in Premio Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager.This issue affects Folders – Unlimited Folders to Organize Media Library Folder, Pages, Posts, File Manager: from n/a through 2.9.2...
ECHO-DA22-2BDE-8B83
Bulletin has no description...
MAL-2025-192872 Malicious code in sturdyfetch3 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 51688b3b85839d3b57f16cceb31d5a8eea4de19c3d9ad73395386c9a7b0ef1ca The package sturdyfetch3 was found to contain malicious code...