188601 matches found
Astra Linux – Vulnerability in cups
OpenPrinting CUPS is an open-source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and earlier, there was a heap-based buffer overflow in the CUPS scheduler when constructing filter option strings from job attributes. As of publication, there are no publicly...
Astra Linux – Vulnerability in Linux, Linux 5.10
In the handling of offloads in ipgre.c, there is a possibility of a page fault due to an invalid memory access. This could lead to the disclosure of local information without the need for additional execution privileges. User interaction is not required for exploitation. Product: Android Versions...
RHSA-2026:58710 Red Hat Security Advisory: freerdp security update
Bulletin has no description...
RHSA-2026:58574 Red Hat Security Advisory: libarchive security update
Bulletin has no description...
RHSA-2026:58545 Red Hat Security Advisory: libtiff security update
Bulletin has no description...
RHSA-2026:58547 Red Hat Security Advisory: fence-agents security update
Bulletin has no description...
DEBIAN-CVE-2026-75975
fast-uri is a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not validate the complete IPv6 grammar, so invalid trailing text in an authority can be silently discarded and a malformed attacker-controlled host is turned into a different valid IPv6 destination. For...
DEBIAN-CVE-2026-75931
fast-uri is a URI parser for Node.js. It canonicalizes a host to its ASCII form only when the input carries an explicit scheme, so a scheme-relative reference such as a host preceded by two slashes is returned with its host verbatim and no error set. As a result fast-uri's own entry points disagr...
DEBIAN-CVE-2026-75899
fast-uri is a URI parser for Node.js. It decodes percent escapes in a hostname during parsing and then decodes the parsed hostname a second time during authority recomposition, so a single call to normalize or resolve can turn nested percent-encoded input into a different network destination such...
CVE-2026-75899
creationtimestamp| type| source ---|---|--- 2026-08-24 09:43:16+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mtszcefdrc2b 2026-08-24 11:14:13+00:00| seen| https://bsky.app/profile/suriq.io/post/3mtt6ezu55n25 2026-08-24 13:15:03+00:00| seen|...
CVE-2026-68960
creationtimestamp| type| source ---|---|--- 2026-08-24 08:45:38+00:00| seen| https://jvn.jp/en/jp/JVN33423625 2026-08-25 08:50:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mvusqjw2p424...
CVE-2026-78255
creationtimestamp| type| source ---|---|--- 2026-08-24 08:31:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hy4p6mf2rxbjw...
CVE-2026-59561
creationtimestamp| type| source ---|---|--- 2026-08-24 04:46:40+00:00| seen| https://jvn.jp/en/jp/JVN74538868 2026-08-27 00:47:17+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mtzmqpm2ek2a...
CVE-2026-78213
creationtimestamp| type| source ---|---|--- 2026-08-24 04:46:37+00:00| seen| https://www.twcert.org.tw/en/cp-139-11124-b8b51-2.html 2026-08-24 08:15:15+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-78213...
CSV Injection
Overview exceljs is a package to Read, manipulate and write spreadsheet data and styles to XLSX and JSON. Affected versions of this package are vulnerable to CSV Injection through the CSV.write process in lib/csv/csv.js. An attacker can trigger spreadsheet formula execution by supplying a cell...
CVE-2026-78147
creationtimestamp| type| source ---|---|--- 2026-08-24 00:12:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5f56s64fsu77e 2026-08-24 20:52:01+00:00| seen| https://bsky.app/profile/cvemon.bsky.social/post/3mtu6oabqzw24...
etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline
...
CVE-2026-77003
creationtimestamp| type| source ---|---|--- 2026-08-23 21:39:40+00:00| seen| https://bsky.app/profile/cvemon.bsky.social/post/3mtrqujhhvs2k...