186558 matches found
DEBIAN-CVE-2026-55194
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, rpcclientrecvfragment in libfreerdp/core/gateway/rpcclient.c ensures the response reassembly stream capacity using only the server-declared allochint rather than the actual StubLength about to be written. A maliciou...
CVE-2026-59887
A flaw was found in linkify-it, a library for recognizing links. A remote attacker could exploit this vulnerability by providing specially crafted user text. The mailto: schema validator, when processing this input, can be repeatedly invoked, leading to excessive CPU consumption. This can result ...
CVE-2026-62668
creationtimestamp| type| source ---|---|--- 2026-08-19 18:09:15+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthdalebxe2p 2026-08-19 19:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mthhr5af5y2e...
CVE-2026-39944
A flaw was found in Ceph RGW's STS Security Token Service session token implementation. The STS tokens use the same unauthenticated AES-128-CBC encryption as CephX, which lacks message authentication and uses a hardcoded initialization vector. Because there is no integrity protection on the token...
CVE-2026-75141
creationtimestamp| type| source ---|---|--- 2026-08-19 18:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mthcrkiqxx2m...
CVE-2020-37267
A flaw was found in Renovate. When used with Azure DevOps, the bot's authorization token may be exposed in server or pipeline logs. This occurs because the git http.extraheader=AUTHORIZATION parameter is logged without redaction. An attacker with access to these logs could obtain the bot's...
EUVD-2026-62665
marimo before 0.23.15 contains a code injection vulnerability in the notebook configuration handler that allows attackers to execute arbitrary commands by supplying a crafted MCP server entry with an attacker-controlled command value embedded in a notebook. When the notebook is opened in edit mod...
CVE-2026-75149 marimo < 0.23.15 Code Injection via MCP Server Configuration
marimo before 0.23.15 contains a code injection vulnerability in the notebook configuration handler that allows attackers to execute arbitrary commands by supplying a crafted MCP server entry with an attacker-controlled command value embedded in a notebook. When the notebook is opened in edit mod...
MINI-P7W2-7PQG-57F2
Bulletin has no description...
MINI-3RQH-899Q-VWHF
Bulletin has no description...
MINI-WW3R-CX53-RF6R
Bulletin has no description...
MINI-PC9J-Q467-XX97
Bulletin has no description...
MINI-7XMF-FVX8-X4W4
Bulletin has no description...
MINI-V6FM-4GX9-855H
Bulletin has no description...
MINI-7GXR-G53C-P9RG
Bulletin has no description...
MINI-JFWR-WVHH-WPWF
Bulletin has no description...
MINI-V4HC-QH6P-MRMW
Bulletin has no description...
MINI-5JX9-X544-J4C5
Bulletin has no description...