54186 matches found
DEBIAN-CVE-2026-63847
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set nouserfence for JPEG v2.5 ring JPEG rings do not support 64-bit user fence writes, reject CS submissions with user fences. cherry picked from commit 3216a7f4e2642bda5fd14f57586e835ae9202587...
CVE-2026-63868
In the Linux kernel, the following vulnerability has been resolved: net: garp: fix unsigned integer underflow in garppduparseattr The receive-side GARP attribute parser computes dlen with reversed operands: dlen = sizeofga - ga-len; ga-len is the on-wire attribute length and includes the GARP...
CVE-2026-63837 net: ena: PHC: Check return code before setting timestamp output
In the Linux kernel, the following vulnerability has been resolved: net: ena: PHC: Check return code before setting timestamp output enaphcgettimex64 is setting the output parameter regardless of whether enacomphcgettimestamp succeeded or failed. When enacomphcgettimestamp returns an error, the...
CVE-2026-53395
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix dead ACL conflict guard in nfsd4create nfsd4create steals create-crdpacl/crpacl into the local nfsdattrs via the designated initializer, then immediately sets the source pointers to NULL. The subsequent conflict guard...
CVE-2024-58356
SurrealDB before 2.1.4 silently fails to overwrite table definitions when the DEFINE TABLE ... OVERWRITE clause is used on tables defined with TYPE RELATION. Because table definitions include the PERMISSIONS clause, an attempt to tighten a table's permissions via OVERWRITE does not take effect, a...
CVE-2026-54243 Statamic: CSV formula injection in form submission exports
Statamic is a Laravel and Git powered content management system CMS. Prior to 5.73.24 and 6.20.1, form submission values in src/Forms/Exporters/CsvExporter.php were not neutralized for spreadsheet formula characters when exported to CSV. A submission containing a value beginning with a formula...
CVE-2026-50151
oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, registry/remote/repository.go in blobStore.completePushAfterInitialPost follows a registry-controlled Location header during monolithic blob upload and reuses the Authorization header from the initial POST request for the...
UBUNTU-CVE-2026-62320
Unknown description...
python315-3.15.0~b3-2.1 on GA media (moderate)
python315-3.15.0b3-2.1 on GA media Announcement ID: openSUSE-SU-2026:11286-1 Rating: moderate Cross-References: CVE-2026-11940 CVSS scores: CVE-2026-11940 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVE-2026-11940 SUSE : 8.2...
SUSE-SU-2026:22713-1 Security update for the Linux Kernel RT (Live Patch 18 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-40.1 fixes various security issues The following security issues were fixed: - CVE-2026-23393: bridge: cfm: Fix race condition in peermep deletion bsc1260524. - CVE-2026-31505: iavf: fix out-of-bounds writes in iavfgetethtoolstats bsc1263094....
CVE-2026-54466
creationtimestamp| type| source ---|---|--- 2026-07-16 00:08:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpwxxsieh2w 2026-07-17 23:45:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mquwndmen52g...
PT-2026-60557
Name of the Vulnerable Software and Affected Versions cyrus-imapd versions prior to 3.12.3 Description An authenticated user can access sensitive information by calling the IMAP LISTRIGHTS command against any named mailbox. This allows the user to identify which principals have specific access...
CVE-2026-53366
In the Linux kernel, the following vulnerability has been resolved: ipv4: account for fraggap on the paged allocation path In ipappenddata, when the paged-allocation branch is taken, alloclen and pagedlen are computed as alloclen = fragheaderlen + transhdrlen; pagedlen = datalen - transhdrlen;...
CVE-2026-62685
The CVE affects File Browser prior to version 2.63.17. The issue arises in how user scopes are built from usernames via cleanUsername() when Signup=true and CreateUserDir=true: the many-to-one normalization can collapse usernames such as team/one, team one, and team-one to the same home directory...
DEBIAN-CVE-2026-61867
ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the TIFF encoder when memory allocation fails. Attackers can trigger allocation failures during TIFF image processing to cause memory exhaustion and denial of service...
RHSA-2026:39573 Red Hat Security Advisory: yggdrasil security update
Bulletin has no description...
PT-2026-60181
Name of the Vulnerable Software and Affected Versions Cloudreve versions prior to 4.16.1 Description The remote download workflow allows non-admin users with remote download permissions to fetch internal-only URLs. This occurs because the system accepts user-supplied URLs at the POST...
Moderate: Red Hat Security Advisory: libsolv security update
An update for libsolv is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated
Apache Tomcat did not validate HTTP/2 request headers, triggering unexpected application behavior, as applications may presume that header values exposed through the Servlet API would be valid...
