83434 matches found
MINI-32MC-QWPX-WH65
Bulletin has no description...
MINI-37PV-H67Q-R4C3
Bulletin has no description...
MINI-P7R9-VH83-G7QC
Bulletin has no description...
DEBIAN-CVE-2026-66758
A flaw was found in the file-fits plugin in GIMP. When processing a FITS image file, the plugin calculates memory allocation sizes using signed 32-bit integers for width and height. If a crafted file sets both values to large values, their product exceeds 2^31 and overflows, resulting in an...
CVE-2026-12383 Eda-server: externaleventstreamviewset trusts subject header without validation and leaks expected dn
A flaw was found in the Event-Driven Ansible EDA server. The ExternalEventStreamViewSet uses permissive access controls permissionclasses=AllowAny, authenticationclasses= and relies solely on the Subject HTTP header value for mTLS authentication without verifying that the header originated from a...
CVE-2026-10683 DesignWare I2C target driver can be wedged into a permanent stuck state by an on-bus master (DoS)
In the Synopsys DesignWare I2C driver drivers/i2c/i2cdw.c operating in target/slave mode, the rxfull interrupt handler gates the writerequested callback on dw-state != CMDSEND, and dw-state is only reset to READY on a STOP interrupt. The STARTDET interrupt, whose handler in...
CGA-7F98-J55X-R3X6
Bulletin has no description...
EUVD-2026-49392
Ekushey Project Manager CRM through version 5.0 contains a missing uniqueness constraint vulnerability that allows authenticated administrators to create duplicate client accounts with identical email and password credentials. Attackers can exploit the lack of email field uniqueness enforcement t...
CVE-2026-66028 Ekushey Project Manager CRM 5.0 Missing Uniqueness Constraint via Client Email
Ekushey Project Manager CRM through version 5.0 contains a missing uniqueness constraint vulnerability that allows authenticated administrators to create duplicate client accounts with identical email and password credentials. Attackers can exploit the lack of email field uniqueness enforcement t...
CVE-2026-58227 TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain
The Erlang/OTP ssl application does not detect cycles when reconstructing an incomplete peer certificate chain during a TLS or DTLS handshake. In sslcertificate:handleincompletechain/5, the received chain is passed to sslcertificate:buildcertificatechain/5, which walks issuer relationships via...
MINI-34Q3-G49Q-56Q6
Bulletin has no description...
MINI-569H-79PQ-FMPG
Bulletin has no description...
MINI-GFQ9-6J37-RFC6
Bulletin has no description...
MINI-H5XM-2XW8-G5F6
Bulletin has no description...
MINI-PRPX-X53Q-Q2M4
Bulletin has no description...
MINI-FXFV-6HXQ-VCGW
Bulletin has no description...
MINI-55QP-GR9R-GM34
Bulletin has no description...
MINI-PGXP-G685-JQ22
Bulletin has no description...