171511 matches found
CVE-2026-72838: Allocation of Resources Without Limits or Throttling
FileBrowser versions before 2.63.19 fail to enforce the declared Upload-Length in the TUS resumable-upload PATCH endpoint, allowing authenticated users to write arbitrary data to disk. Attackers can send oversized request bodies that exceed the declared upload length to exhaust available disk spa...
GHSA-3HVR-PHFH-X26G vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-azure...
MINI-97WQ-P4GX-QF6J
Bulletin has no description...
MINI-WG48-FP5J-R8VF
Bulletin has no description...
MINI-4PVX-86R7-8724
Bulletin has no description...
MINI-Q4Q8-37MW-322Q
Bulletin has no description...
ROOT-APP-MAVEN-CVE-2026-39304 CVE-2026-39304 in org.apache.activemq:activemq-client - Patched by Root
Root has patched CVE-2026-39304 in the org.apache.activemq:activemq-client package for Root:Maven. Multiple fixed versions available...
Security update for dracut
This update for dracut fixes the following issue: Update to version 059+suse.567.gf5cfeb7f7. Securitys issue fixed: CVE-2026-15816: root code execution via unescaped error message written to sourced emergency-hook script in die bsc1274432. Other updates and bugfixes: Fixbase: sanitize message...
CGA-4HHQ-CJ6C-7H9M
Bulletin has no description...
CLSA-2026-1786636721 TuxCare security update for dompurify (14 CVEs)
TuxCare rebuilt dompurify to address 14 CVEs. Fixed in 2.4.7-tuxcare.1...
CLSA-2026-1786636600 TuxCare security update for dompurify (16 CVEs)
TuxCare rebuilt dompurify to address 16 CVEs. Fixed in 2.4.0-tuxcare.1...
UBUNTU-CVE-2026-70462
rsync 3.1.0 before 3.5.0 contains a signed integer overflow vulnerability in the I/O timeout implementation that allows attackers to permanently disable connection timeouts by injecting MSGIOTIMEOUT messages carrying non-positive zero or negative values. Attackers can craft malicious MSGIOTIMEOUT...
UBUNTU-CVE-2026-53785
rsync before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to write files outside the intended destination directory tree by crafting relative paths with symlink components in --relative mode. The makepath function follows symlinks pointing outside the destination...
EUVD-2026-45029
Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list Incomplete fix for CVE-2026-31892...
MINI-692F-2GQH-CQCH
Bulletin has no description...
MINI-CR85-33GW-6M98
Bulletin has no description...
MINI-2VMR-6HF3-7P27
Bulletin has no description...
CLSA-2026-1786627141 TuxCare security update for com.fasterxml.jackson.core:jackson-databind (2 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 2 CVEs. Fixed in 2.14.2-tuxcare.1...