186426 matches found
DEBIAN-CVE-2026-75140
jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to exhaust JVM heap memory by supplying a deeply nested XML document with uniquely-namespaced elements. The builder copies the entire inherited...
CVE-2026-18272 Kenwood DNR1007XR startUpdateProcess Command Injection Vulnerability
Kenwood DNR1007XR startUpdateProcess Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DNR1007XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists...
EUVD-2026-63419
Kenwood DNR1007XR startUpdateProcess Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DNR1007XR devices. Authentication is not required to exploit this vulnerability. The specific flaw exists...
EUVD-2026-63418
Kenwood DNR1007XR vCardParser Heap-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DNR1007XR devices. Authentication is not required to exploit this vulnerability. The specifi...
EUVD-2026-63416
Kenwood DNR1007XR tchdrbytestreamread Out-Of-Bounds Write Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DNR1007XR devices. Authentication is not required to exploit this vulnerability. The specif...
ECHO-DB00-4309-1170
Bulletin has no description...
ECHO-041C-12C3-789B
Bulletin has no description...
ECHO-EB5E-B491-1225
Bulletin has no description...
ECHO-471F-26DC-2062
Bulletin has no description...
EUVD-2026-63480
LangBot is a global IM bot platform designed for LLMs. In version 4.10.7 and earlier, any authenticated user can add or change an STDIO MCP server configuration without an adequate authorization boundary. In src/langbot/pkg/provider/tools/loaders/mcp.py, StdioServerParameters accepts the configur...
MINI-9PXR-5PXV-XJ5V
Bulletin has no description...
MINI-44JR-6VC3-8CRM
Bulletin has no description...
MINI-79GG-F776-W44M
Bulletin has no description...
MINI-FC3R-5MQV-6RXX
Bulletin has no description...
MINI-WFRQ-J94W-45VH
Bulletin has no description...
MINI-9XVC-GJ8V-995X
Bulletin has no description...
MINI-WH95-4P5J-4GPV
Bulletin has no description...
MINI-X2W7-HQ2Q-94XF
Bulletin has no description...