3458 matches found
DEBIAN-CVE-2026-59088
A flaw was found in GIMP. A signed integer overflow vulnerability exists in the file-fli plugin when processing FLI image files. This occurs due to an incorrect calculation during memory allocation for image buffers, where the multiplication of image width and height can exceed the maximum intege...
CGA-7H3J-3R8Q-G8QM
Bulletin has no description...
CVE-2026-49163
creationtimestamp| type| source ---|---|--- 2026-08-07 05:00:06+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mshrkg7rfy2g 2026-08-07 15:12:52+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117054869893780449 2026-08-11 19:00:39+00:00| seen|...
CVE-2026-45538
creationtimestamp| type| source ---|---|--- 2026-08-04 21:16:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbwosyvzx2h...
CVE-2024-17583
creationtimestamp| type| source ---|---|--- 2026-08-03 10:01:29+00:00| seen| https://bsky.app/profile/sec-news-bot.bsky.social/post/3ms6ajm6jch2l...
CVE-2026-67342
creationtimestamp| type| source ---|---|--- 2026-08-01 14:01:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/jcvjw5wuz2ydv 2026-08-01 15:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrzqcxjacm2g 2026-08-01 20:22:04+00:00| seen|...
CVE-2026-48910
creationtimestamp| type| source ---|---|--- 2026-07-30 14:37:09+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/dsqsb44f2t5bl...
UBUNTU-CVE-2026-17543
Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2. before 8.2.33, from 8.3. before 8.3.33, from 8.4. before 8.4.24, and from 8.5. before 8.5.9...
BELL-CVE-2026-8348
Bulletin has no description...
CVE-2026-51260
creationtimestamp| type| source ---|---|--- 2026-07-28 19:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrq4m7sgsu2y...
UBUNTU-CVE-2026-62433
Parts of the DMOP handling code assumes the caller has provided the required number of buffers for the given operation without any checking being done. As a result, certain operations might access stack rubble as structures are possibly uninitialized...
CVE-2026-42493
Addressing certain issues, in particular related to operations which may take excessively long and therefore would need preemption, has turned out overly costly. Since alternatives HVM/PVH: HAP, PV: shim are commonly available, the decision was to deprecate the functionality, while still retainin...
EUVD-2026-49786
Parts of the DMOP handling code assumes the caller has provided the required number of buffers for the given operation without any checking being done. As a result, certain operations might access stack rubble as structures are possibly uninitialized...
CVE-2026-41874
Quick.Cart stores hard-coded, plaintext admin credentials in a configuration file. This flaw allows attackers with access to the server file system to retrieve authentication details, potentially leading to privilege escalation. The vendor assessed the likelihood of exploitation as very low and...
BELL-CVE-2026-66032
Bulletin has no description...
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring Framework [CVE-2026-41850, CVE-2026-41851, CVE-2026-41852]
Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring Framework CVE-2026-41850, CVE-2026-41851, CVE-2026-41852. Spring Framework is used as part of our microservices. These vulnerabilities have been addressed. Please read the details for remediation below...
CVE-2026-17529
CVE-2026-17529 relates to AstrBotDevs AstrBot
CVE-2026-64379 smb: client: mask server-provided mode to 07777 in modefromsid
In the Linux kernel, the following vulnerability has been resolved: smb: client: mask server-provided mode to 07777 in modefromsid When modefromsid is active, parsedacl applies the server-provided subauth2 value from the NFS mode SID to cfmode without masking to 07777. Apply the correct masking,...
CVE-2026-64379 smb: client: mask server-provided mode to 07777 in modefromsid
In the Linux kernel, the following vulnerability has been resolved: smb: client: mask server-provided mode to 07777 in modefromsid When modefromsid is active, parsedacl applies the server-provided subauth2 value from the NFS mode SID to cfmode without masking to 07777. Apply the correct masking,...