BIT-KEYDB-2026-25588 RedisTimeSeries RESTORE invalid memory access may allow remote code execution

RedisTimeSeries is a time-series module for Redis. In all versions before 1.12.14 of RedisTimeSeries, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execute RESTORE on a server with the...

BELL-CVE-2026-6502

Bulletin has no description...

BELL-CVE-2026-43280

Bulletin has no description...

BELL-CVE-2026-43208

Bulletin has no description...

BELL-CVE-2026-43192 CVE-2026-43192 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-43144

Bulletin has no description...

BELL-CVE-2026-43164

Bulletin has no description...

BELL-CVE-2026-43106 CVE-2026-43106 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2026-43095

Bulletin has no description...

BELL-CVE-2026-43100

Bulletin has no description...

BELL-CVE-2026-43087 CVE-2026-43087 does not affect BellSoft software

Bulletin has no description...

BELL-CVE-2025-71271

Bulletin has no description...

BELL-CVE-2026-43070

Bulletin has no description...

CVE-2026-44602

Tor before 0.4.9.7 has a NULL pointer dereference when a CERT cell is received out of order, aka TROVE-2026-006...

imageproc: Out-of-bounds read via NaN coordinates in bilinear/bicubic sampling

A bounds check was performed in floating points before a cast to the index passed to an unchecked access function. This checked considered NaN cases improperly, causing them to succeed the check instead of failing it. The floating point coordinate is under caller control by passing a selected...

CVE-2026-42194 Incomplete fix for CVE-2026-32812: SSRF in admidio

Admidio is an open-source user management solution. Prior to version 5.0.9, the incomplete SSRF fix in Admidio's fetchmetadata.php validates the resolved IP address but passes the original hostname-based URL to curlinit, leaving a DNS rebinding TOCTOU window that allows redirecting requests to...

Linux Distros Unpatched Vulnerability : CVE-2026-44597

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a reason in its payload, aka TROVE-2026-011. CVE-2026-44597 Note...

Linux Distros Unpatched Vulnerability : CVE-2026-7942

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross- origin data via a crafted HTML page. Chromium securit...

Linux Distros Unpatched Vulnerability : CVE-2026-7995

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in AdFilter in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML...

CVE-2026-8084

A vulnerability was determined in OSGeo gdal up to 3.13.0dev-4. This vulnerability affects the function memmove of the file frmts/hdf4/hdf-eos/SWapi.c of the component HDF-EOS Grid File Handler. This manipulation causes out-of-bounds read. The attack is restricted to local execution. The exploit...