3437 matches found
DEBIAN-CVE-2026-67291
FreeRDP before 3.29.0 affected versions = 3.28.0 contains a heap out-of-bounds read in updateprocessglyphfragments/glyphcachefragmentput in libfreerdp/cache/glyph.c. When handling a GLYPHFRAGMENTADD update, the code reads a one-byte server-controlled declared fragment size but does not verify it...
UBUNTU-CVE-2026-67297
FreeRDP before 3.29.0 fails to enforce the RESPONSESIZELIMIT when processing Transfer-Encoding: chunked HTTP responses in httpresponserecvbody. Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering th...
JLSEC-2026-1090
Heap-based Buffer Overflow in GitHub repository hpjansson/chafa prior to 1.12.0...
DEBIAN-CVE-2026-53505
Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor's filters:proportion filter does not enforce an upper bound on and runs in the post-transform phase. An attacker can trigger extremely large resizes CPU/memory exhaustion and cause denial of service. This issu...
DEBIAN-CVE-2026-53502
Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, fileloader decodes percent-encoded path segments after its root-boundary validation, allowing traversal outside FILELOADERROOTPATH through watermark or frame filter input. This issue is fixed in 7.8.0...
BELL-CVE-2026-64558
Bulletin has no description...
BELL-CVE-2026-56850
Bulletin has no description...
UBUNTU-CVE-2026-53587
libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 performs a fixed-size strncmp in setdata in src/libgit2/transports/smartpkt.c without first...
UBUNTU-CVE-2026-66756
Improper Protection of Alternate Path vulnerability in Apache Tika. This issue affects Apache Tika: from 4.0.0-alpha-1 before 4.0.0-beta-1. Users are recommended to upgrade to version 4.0.0-beta-1, which fixes the issue...
JLSEC-2026-896
ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow...
UBUNTU-CVE-2026-7260
Circular symbolic links in phar archives could lead to unbounded recursion, exhausting the C stack and crashing the PHP process, in PHP versions from 8.2. before 8.2.33, from 8.3. before 8.3.33, from 8.4. before 8.4.24, and from 8.5. before 8.5.9...
CLEANSTART-2026-FY03809 Security fixes in expat 2.6.2-r0
Package expat version 2.6.2-r0 fixes 1 vulnerabilities: CVE-2024-28757...
CLEANSTART-2026-KI68145 Security fixes in cloudnative-pg 1.26.3-r1
Package cloudnative-pg version 1.26.3-r1 fixes 10 vulnerabilities: ghsa-xgrm-4fwx-7qm8, ghsa-9jj7-4m8r-rfcm, CVE-2026-33815, CVE-2026-33816, ghsa-j88v-2chj-qfwx...
CLEANSTART-2026-CQ67878 Security fixes in prometheus-mysqld-exporter 0.17.2-r2
Package prometheus-mysqld-exporter version 0.17.2-r2 fixes 1 vulnerabilities: CVE-2026-42504...
CLEANSTART-2026-SU97582 Security fixes in busybox 1.36.1-r25
Package busybox version 1.36.1-r25 fixes 1 vulnerabilities: CVE-2023-42366...
CLEANSTART-2026-CT11931 Security fixes in prometheus-mysqld-exporter 0.18.0-r3
Package prometheus-mysqld-exporter version 0.18.0-r3 fixes 1 vulnerabilities: CVE-2026-42504...
CLEANSTART-2026-KX00546 Security fixes in harbor-registry-fips 2.8.3-r0
Package harbor-registry-fips version 2.8.3-r0 fixes 1 vulnerabilities: CVE-2025-29923...
CLEANSTART-2026-GF33583 Security fixes in kustomize-fips 5.7.1-r1
Package kustomize-fips version 5.7.1-r1 fixes 2 vulnerabilities: CVE-2025-68121, CVE-2025-61732...