openssh: Heap out-of-bounds read in Red Hat Enterprise Linux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination

A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI Generic Security Service Application Programming Interface indicators when a trailing NULL termination is missing in the auth-indicators array. A remote attacker, under specific...

WordPress Subscriptions for WooCommerce plugin <= 2.0.0 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Plugin Installation vulnerability

Missing Authorization to Authenticated Shop Manager+ Arbitrary Plugin Installation vulnerability discovered by Wordfence PRISM in WordPress Plugin Subscriptions for WooCommerce versions = 2.0.0...

CVE-2026-6336

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.6 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an unauthorized user to view project import source information due to a missing authorization check...

DEBIAN-CVE-2026-5056

GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

MINI-P3PV-5FVG-G24F

Bulletin has no description...

MINI-XPWG-X3C4-G6HQ

Bulletin has no description...

MINI-P3C5-VFJ9-VXGP

Bulletin has no description...

MINI-XHFQ-HFV7-9G99

Bulletin has no description...

MINI-F2M8-2RG6-4627

Bulletin has no description...

MINI-MW8M-RV98-FJ9R

Bulletin has no description...

MINI-WJ2R-39XR-85C4

Bulletin has no description...

MINI-2X8F-MHHH-782V

Bulletin has no description...

MINI-GHM2-8X27-8VJX

Bulletin has no description...

MINI-J7F2-XR5G-42H2

Bulletin has no description...

MINI-3RWJ-Q2P2-WQFQ

Bulletin has no description...

MINI-CJJ5-5F5C-RPHH

Bulletin has no description...

MINI-W767-PFXP-V62Q

Bulletin has no description...

CGA-CF9C-V9MM-XC44

Bulletin has no description...

CVE-2026-5057 ATEN Unizon RpcProvider Missing Authentication Denial-of-Service Vulnerability

ATEN Unizon RpcProvider Missing Authentication Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of ATEN Unizon. Authentication is not required to exploit this vulnerability. The specific flaw exists withi...

CVE-2026-67430 MCP Ruby SDK: Unbounded session retention in StreamableHTTPTransport allows memory exhaustion via initialize flood

MCP Ruby SDK is the official Ruby SDK for Model Context Protocol servers and clients. Prior to 0.23.0, MCP::Server::Transports::StreamableHTTPTransport in the mcp gem does not expire sessions by default, so repeated initialize requests retain unbounded ServerSession objects and can exhaust proces...