180 matches found
DEBIAN-CVE-2026-65904
DOMPurify through 3.3.3 fails to sanitize DOM elements passed via INPLACE mode when the element originates from a different window/realm e.g., an iframe's contentDocument. A cross-realm instanceof check in the private isNode function returns false for foreign-realm nodes, causing DOMPurify to...
MINI-95V7-X446-9G2V
Bulletin has no description...
DEBIAN-CVE-2026-50713
Bulletin has no description...
DEBIAN-CVE-2026-54441
Bulletin has no description...
DEBIAN-CVE-2026-59851
A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requested local user, allowing authenticated clients to log in as arbitrary users...
DEBIAN-CVE-2024-5300
An access control bypass and information disclosure vulnerability exists in the base AppArmor security profile configuration of Canonical snapd. The abstraction rules located in /etc/apparmor.d/abstractions/nss-systemd inherited via inadvertently permit strictly confined snap applications, which...
DEBIAN-CVE-2026-64189
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix race between dump and ipsetlist resize The release path of ipsetdumpdo and ipsetdumpdone read inst-ipsetlist via ipsetrefnetlink, a plain rcudereferenceraw of the array pointer. These run from netlinkrecvmsg...
DEBIAN-CVE-2026-64186
In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs In iommummiowrite and iommucapabilitywrite, the variables dbgmmiooffset and dbgcapoffset are declared as int. However, they are populated using kstrtou32fromuser. If ...
DEBIAN-CVE-2026-64035
In the Linux kernel, the following vulnerability has been resolved: igc: set tx buffer type for SMD frames Sashiko pointed out that igcfpeinitsmdframe initializes igctxbuffer fields for an SMD skb, but does not set the buffer type:...
MINI-QHXC-R6FX-W59V
Bulletin has no description...
DEBIAN-CVE-2026-54432
Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2 allows Stored Cross-Site Scripting XSS. The issue occurs because the attachment MIME type is not properly escaped on the attachment-validation warning page...
MINI-G9RC-5CP7-2QGJ
Bulletin has no description...
MINI-MJGQ-WHQR-Q4W2
Bulletin has no description...
MINI-PMVH-WW38-42X6
Bulletin has no description...
MINI-2QFM-Q3W3-4G67
Bulletin has no description...
MINI-J94F-RM4Q-6F3X
Bulletin has no description...
MINI-6MJP-XF8M-H37R
Bulletin has no description...
MINI-JWFM-VVM9-X385
Bulletin has no description...