515 matches found
RHSA-2026:2952 Red Hat Security Advisory: freerdp security update
Bulletin has no description...
RHSA-2026:2771 Red Hat Security Advisory: edk2 security update
Bulletin has no description...
CVE-2026-20627
An issue existed in the handling of environment variables. This issue was addressed with improved validation. This issue is fixed in watchOS 26.3, macOS Tahoe 26.3, macOS Sonoma 14.8.4, visionOS 26.3, iOS 26.3 and iPadOS 26.3. An app may be able to access sensitive user data...
GHSA-X468-PHR8-H3P3 `uniswap-utils` was removed from crates.io for malicious code
It depended on the evm-units crate, which appeared to be attempting to steal cryptocurrency...
GO-2026-4349 Improper validattion of configured threshold for delegations in github.com/theupdateframework/go-tuf
Improper validattion of configured threshold for delegations in github.com/theupdateframework/go-tuf...
MINI-RV9C-V782-3MF2
Bulletin has no description...
http-protection security vulnerabilities
http-protection is a network attack protection library developed by Rogério Zambon. Version 0.2.0 of http-protection contains security vulnerabilities; these vulnerabilities stem from IP spoofing, which may allow attackers to bypass the protected middleware and gain unauthorized access...
RHSA-2026:1487 Red Hat Security Advisory: thunderbird security update
Bulletin has no description...
CGA-QF76-V8XH-RHMP
Bulletin has no description...
CGA-9CHP-QW69-74C8
Bulletin has no description...
ECHO-1139-B964-9387 Kernel vulnerabilities are irrelevant in container environments. Additionally this package only contains header files.
Bulletin has no description...
RHSA-2026:1229 Red Hat Security Advisory: gnupg2 security update
Bulletin has no description...
thunderbird security update
140.7.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 140.7.0 - Add OpenELA debranding 140.7.0-1 - Update to 140.7.0 ESR...
Malicious code in ofjaaah-security-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94bfbd5c89af01468786a4ff45da3126dbd49e28e4a250d0d124fc65b1f0c508 The package ofjaaah-security-lib was found to contain malicious code. Source: ghsa-malware...
CVE-2025-67077
File upload vulnerability in Omnispace Agora Project before 25.10 allowing authenticated, or under certain conditions also guest users, via the UploadTmpFile action...
CVE-2021-0134
Improper input validation in an API for the IntelR Security Library before version 3.3 may allow a privileged user to potentially enable denial of service via network access...
CVE-2021-0131
Use of cryptographically weak pseudo-random number generator PRNG in an API for the IntelR Security Library before version 3.3 may allow an authenticated user to potentially enable information disclosure via network access...
CVE-2021-0133
Key exchange without entity authentication in the IntelR Security Library before version 3.3 may allow an authenticated user to potentially enable escalation of privilege via network access...
DEBIAN-CVE-2025-68347
In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events The DSP event handling code in hwdepread could write more bytes to the user buffer than requested, when a user provides a buffer smaller than the event header...