3642 matches found
MINI-W5PX-277M-3CGV
Bulletin has no description...
MINI-332M-8JPM-X93V
Bulletin has no description...
ECHO-14A1-A31D-6FEE
Bulletin has no description...
MINI-P97V-Q7H4-MFW9
Bulletin has no description...
MINI-88GV-9CQ6-FPHW
Bulletin has no description...
MINI-V2GV-G9MV-X4MC
Bulletin has no description...
MINI-28FP-3HRP-W5Q3
Bulletin has no description...
Security update for snpguest
This update for snpguest fixes the following issues: CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes bsc1274139. CVE-2026-41678: openssl: incorrect bounds assertion in AES keywrap can lead to an out-of-bounds write bsc1270642. CVE-2026-4232...
SUSE-SU-2026:3577-1 Security update for snpguest
This update for snpguest fixes the following issues: - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes bsc1274139. - CVE-2026-41678: openssl: incorrect bounds assertion in AES keywrap can lead to an out-of-bounds write bsc1270642. -...
MINI-JG9C-5465-2FMH
Bulletin has no description...
DEBIAN-CVE-2026-68146
In the Linux kernel, the following vulnerability has been resolved: ftrace: Add global mutex to serialize traceparser access In ftrace, the traceparser structure is allocated and initialized when a trace file is opened, and is subsequently used across write and release handlers to parse user inpu...
Use After Free
Apache Fory is vulnerable to Use After Free. The vulnerability is due to a use-after-free flaw in the Rust deserialization logic, where a crafted Fory payload can trigger undefined behavior, leading to process crashes or potential disclosure of sensitive memory contents...
CVE-2026-68146: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ftrace: Add global mutex to serialize traceparser access In ftrace, the traceparser structure is allocated and initialized when a trace file is opened, and is subsequently used across write and release handlers to parse user inpu...
Safe ErrorRegistry APIs can cause undefined behavior
All published versions of dcrypt-api before 2.0.0 exposed safe ErrorRegistry operations that could trigger undefined behavior when the default std feature was enabled. Stored Box values were erased to raw pointers and later deallocated as Box. The geterror operation also performed an unchecked ca...
PT-2026-76522
All published versions of dcrypt-api before 2.0.0 exposed safe ErrorRegistry operations that could trigger undefined behavior when the default std feature was enabled. Stored Box values were erased to raw pointers and later deallocated as Box. The get error operation also performed an unchecked...
PT-2026-76524
setlocale and TextDomain::init are unsound and may allow safe code to exhibit undefined behavior when called in a multi-threaded program. The flaw is fixed in 0.8.0 by marking these functions unsafe and documenting the conditions under which they can be called safely...
Important: aws-nitro-enclaves-cli
Issue Overview: rust-openssl provides OpenSSL bindings for the Rust programming language. From 0.9.7 to before 0.10.79, X509Ref::ocspresponders returns OCSP responder URLs from a certificate's AIA extension as OpensslString, whose Deref wraps the raw bytes with str::fromutf8unchecked. OpenSSL doe...
JLSEC-2026-1159 GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in...
GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in the parsecontentrange function within src/http.c that allows server-controlled values to cause signed integer arithmetic to overflow. Attackers can supply malicious Content-Range header values to trigg...
JLSEC-2026-847
In CatromWeights, MeshInterpolate, InterpolatePixelChannel, InterpolatePixelChannels, and InterpolatePixelInfo, which are all functions in /MagickCore/pixel.c, there were multiple unconstrained pixel offset calculations which were being used with the floor function. These calculations produced...