22815 matches found
PT-2026-23722
Name of the Vulnerable Software and Affected Versions CoreDNS versions prior to 1.14.2 Description A denial of service issue exists in the loop detection plugin of CoreDNS. A remote attacker can crash the DNS server by sending specially crafted DNS queries. The flaw is caused by the use of a...
CVE-2026-27596
A flaw was found in Exiv2, a C++ library and command-line utility for managing image metadata. An out-of-bounds read vulnerability exists within the preview component. This flaw can be triggered when an attacker processes a specially crafted image file using Exiv2 with a specific command-line...
CVE-2024-57854
Net::NSCA::Client versions through 0.009002 for Perl uses a poor random number generator. Version v0.003 switched to use Data::Rand::Obscure instead of Crypt::Random for generation of a random initialisation vectors. Data::Rand::Obscure uses Perl's built-in rand function, which is not suitable fo...
CVE-2024-57854 Net::NSCA::Client versions through 0.009002 for Perl uses a poor random number generator
Net::NSCA::Client versions through 0.009002 for Perl uses a poor random number generator. Version v0.003 switched to use Data::Rand::Obscure instead of Crypt::Random for generation of a random initialisation vectors. Data::Rand::Obscure uses Perl's built-in rand function, which is not suitable fo...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-005745)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005745 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: check send stream number after waitforsndbuf This patch fixes a corner case where the asoc...
PT-2026-23125
Name of the Vulnerable Software and Affected Versions Net::NSCA::Client versions through 0.009002 Description Net::NSCA::Client for Perl utilizes an inadequate random number generator. Version 0.003 transitioned to using Data::Rand::Obscure instead of Crypt::Random for generating initialization...
CVE-2026-20031
A vulnerability in the HTML Cascading Style Sheets CSS module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper error handling when splitting UTF-8 strings. An attacker could exploit th...
DEBIAN-CVE-2026-3544
Heap buffer overflow in WebCodecs in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: High...
RUSTSEC-2026-0075 All-Zero Key Generation on Catastrophic RNG Failure
The libcrux-ed25519 key generation samples Ed25519 secret keys from a provided CSPRNG in a loop for up to 100 attempts until a non-zero key is found. If a non-zero key could not be sampled within 100 attempts the key generation function would silently continue with an all-zero buffer as the secre...
MINI-XVMG-J8H4-RJ57
Bulletin has no description...
MINI-X8WM-96M7-R48P
Bulletin has no description...
MINI-VXH8-42V9-F95X
Bulletin has no description...
MINI-R9X5-JJCX-2XC3
Bulletin has no description...
MINI-MVJ6-WMVF-894M
Bulletin has no description...
MINI-7986-787V-WFC3
Bulletin has no description...
MINI-89RF-9P24-JFRX
Bulletin has no description...
MINI-899X-WV8M-8F69
Bulletin has no description...
MINI-6855-M8CH-G78F
Bulletin has no description...
CGA-CH83-5F92-39M3
Bulletin has no description...
CVE-2026-3486
A vulnerability has been found in itsourcecode College Management System 1.0. This vulnerability affects unknown code of the file /admin/student-fee.php. Such manipulation of the argument rollno leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed t...