9643 matches found
BELL-CVE-2026-23148
Bulletin has no description...
BELL-CVE-2026-23144
Bulletin has no description...
BELL-CVE-2026-23128
Bulletin has no description...
BELL-CVE-2026-23121
Bulletin has no description...
ECHO-3D48-BF02-E261
Bulletin has no description...
ECHO-4DDC-212A-1B8D
Bulletin has no description...
ECHO-F7A0-3515-5769
Bulletin has no description...
CVE-2026-22860
A path traversal flaw has been discovered in the rubygem Rack. Rack::Directory’s path check used a string prefix match on the expanded path. A request like /../rootexample/ can escape the configured root if the target path starts with the root string, allowing directory listing outside the intend...
DEBIAN-CVE-2026-2661
A security flaw has been discovered in Squirrel up to 3.2. This affects the function SQObjectPtr::operator in the library squirrel/sqobject.h. The manipulation results in heap-based buffer overflow. The attack needs to be approached locally. The exploit has been released to the public and may be...
MINI-X2JR-Q39X-HW6Q
Bulletin has no description...
DEBIAN-CVE-2026-23228
In the Linux kernel, the following vulnerability has been resolved: smb: server: fix leak of activenumconn in ksmbdtcpnewconnection On kthreadrun failure in ksmbdtcpnewconnection, the transport is freed via freetransport, which does not decrement activenumconn, leaking this counter. Replace...
DEBIAN-CVE-2026-23230
In the Linux kernel, the following vulnerability has been resolved: smb: client: split cachedfid bitfields to avoid shared-byte RMW races isopen, haslease and onlist are stored in the same bitfield byte in struct cachedfid but are updated in different code paths that may run concurrently. Bitfiel...
DEBIAN-CVE-2026-23221
In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: fix use-after-free in driveroverrideshow The driveroverrideshow function reads the driveroverride string without holding the devicelock. However, driveroverridestore uses driversetoverride, which modifies and frees t...
DEBIAN-CVE-2025-71233
In the Linux kernel, the following vulnerability has been resolved: PCI: endpoint: Avoid creating sub-groups asynchronously The asynchronous creation of sub-groups by a delayed work could lead to a NULL pointer dereference when the driver directory is removed before the work completes. The crash...
MINI-5PRG-86FP-VW6W
Bulletin has no description...
MINI-M5X4-3W8P-2HC6
Bulletin has no description...
DEBIAN-CVE-2026-24734
Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat. When using an OCSP responder, Tomcat Native and Tomcat's FFM port of the Tomcat Native code did not complete verification or freshness checks on the OCSP response which could allow certificate revocation to be bypasse...
CGA-H8RC-VC74-27G6
Bulletin has no description...