3380 matches found
CVE-2026-48555
Spatie Laravel Media Library (≤11.22.x) is affected by an SSRF in addMediaFromUrl() used by InteractsWithMedia.php, allowing a remote attacker to induce the server to make arbitrary outbound HTTP requests by providing user-controlled URLs. Impact aligns with CVSS: Network, with low to moderate co...
BELL-CVE-2026-46016
Bulletin has no description...
BELL-CVE-2026-46019
Bulletin has no description...
BELL-CVE-2026-46009
Bulletin has no description...
BELL-CVE-2026-45986
Bulletin has no description...
BELL-CVE-2026-45993
Bulletin has no description...
BELL-CVE-2026-46162
Bulletin has no description...
BELL-CVE-2026-46131
Bulletin has no description...
BELL-CVE-2026-46015
Bulletin has no description...
BELL-CVE-2026-45862
Bulletin has no description...
BELL-CVE-2026-45868
Bulletin has no description...
BELL-CVE-2026-45880
Bulletin has no description...
BELL-CVE-2026-45847
Bulletin has no description...
ROS-20260529-73-0018
The vulnerability of the sscanf function in the libcurl library, a software tool for interacting with servers via CURL, is related to the use of uninitialized resources. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
CVE-2026-45373 CodeWhale: SSRF IPV6 bypass
CodeWhale is a DeepSeek + MiMo coding agent in terminal. Prior to 0.8.26, although SSRF is validated against hostnames that resolve to private IPv6 addresses, when providing the IPV6 in URL as http://::1, the SSRF defenses do not work. This vulnerability is fixed in 0.8.26...
DEBIAN-CVE-2026-46241
In the Linux kernel, the following vulnerability has been resolved: spi: mpc52xx: fix use-after-free on registration failure Make sure to disable and free the interrupts in case controller registration fails to avoid a potential use-after-free and resource leak. This issue was flagged by Sashiko...
DEBIAN-CVE-2026-46202
In the Linux kernel, the following vulnerability has been resolved: HID: appletb-kbd: run inactivity autodim from workqueues The autodim code in hid-appletb-kbd takes backlightdevice-opslock via backlightdevicesetbrightness - mutexlock from two different atomic contexts: appletbinactivitytimer is...
DEBIAN-CVE-2026-46183
In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: protect path kfree with damonsysfslock damonsysfsquotgoal-path can be read and written by users, via DAMON sysfs 'path' file. It can also be indirectly read, for the parameters on,offline committing to...
DEBIAN-CVE-2026-46114
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Reject non-8-byte ATOMICWRITE payloads atomicwritereply at drivers/infiniband/sw/rxe/rxeresp.c unconditionally dereferences 8 bytes at payloadaddrpkt: value = u64 payloadaddrpkt; checkrkey previously accepted an...