2099553 matches found
MINI-4MHG-FR65-J6X8
Bulletin has no description...
MINI-7VP8-37H8-C853
Bulletin has no description...
MINI-9GCW-5JQF-263C
Bulletin has no description...
MINI-262G-FX6J-VQM7
Bulletin has no description...
MINI-8QPR-CVWX-CPGW
Bulletin has no description...
MINI-2VRW-VWMF-8CQ3
Bulletin has no description...
MINI-9MRQ-WHRP-FQ2F
Bulletin has no description...
MINI-M276-7MCJ-MHGP
Bulletin has no description...
MINI-9V6F-P64W-37PJ
Bulletin has no description...
MINI-7FMF-HGF4-344Q
Bulletin has no description...
MINI-64Q5-7HV2-76J8
Bulletin has no description...
MINI-4559-VV7V-VFVG
Bulletin has no description...
MINI-WJ72-HH9J-2VRM
Bulletin has no description...
MINI-4X2R-HX7R-X6V7
Bulletin has no description...
CLSA-2026-1789752547 TuxCare security update for devalue (2 CVEs)
TuxCare rebuilt devalue to address 2 CVEs. Fixed in 4.3.3-tuxcare.5...
CVE-2026-69184 c-ares: CPU-exhaustion denial of service via unbounded DNS name compression pointer chains
c-ares is an asynchronous resolver library. Prior to 1.34.7, aresdnsnameparse enforces backward DNS compression pointers but does not bound the total pointer hops or assembled name length. A malicious DNS server can send a response containing a long descending pointer chain and many resource...
MINI-Q3RQ-QH6P-PW4H
Bulletin has no description...
MINI-48R4-7W29-P4W4
Bulletin has no description...
MINI-XQHG-CP82-FGH2
Bulletin has no description...
MINI-M9V4-QXX6-RFW6
Bulletin has no description...
CVE-2026-69186 c-ares: Memory-amplification denial of service via unvalidated DNS header record counts
c-ares is an asynchronous resolver library. Prior to 1.34.7, aresdnsparse trusts the attacker-controlled ANCOUNT, NSCOUNT, and ARCOUNT fields before confirming that the DNS response contains enough bytes for the claimed records. Because processanswer invokes parsing before transaction ID and...
MINI-V2W8-JQ96-G8RF
Bulletin has no description...
MINI-7FXJ-4M73-VMWC
Bulletin has no description...
MINI-GP3C-GM9W-4X88
Bulletin has no description...
MINI-PFPV-3397-2P72
Bulletin has no description...
CVE-2026-61552 Icinga 2 DSL Injection via Unescaped Import Template Name
Icinga 2 is an open source monitoring system. From 2.4 until 2.14.9, 2.15.4, and 2.16.2, the /v1/objects API writes attacker-controlled template names into generated configuration without escaping them. An authenticated ApiUser with an objects/create/ permission can inject Icinga 2 DSL...
MINI-VCP8-H2M5-CX39
Bulletin has no description...
MINI-MVPP-VRHP-2CCW
Bulletin has no description...
MINI-3MC6-52JR-QM8C
Bulletin has no description...
MINI-26CC-W5CC-RW9W
Bulletin has no description...
MINI-546P-487C-9X45
Bulletin has no description...
MINI-9RCQ-PGXC-RM69
Bulletin has no description...
MINI-Q8HC-56V5-QHJM
Bulletin has no description...
MINI-8J94-72H3-C3X7
Bulletin has no description...
MINI-CPW3-QWGX-5535
Bulletin has no description...
MINI-GJ85-84C9-JG7C
Bulletin has no description...
CVE-2026-61551 Icinga 2: Stack overflow via deeply nested JSON objects
Icinga 2 is an open source monitoring system. Prior to 2.14.9, 2.15.4, and 2.16.2, parsing deeply nested JSON can exhaust the call stack because nesting depth is not bounded. The affected JSON parsing paths are reachable by unauthenticated network clients through the Icinga 2 service on TCP port...
MINI-HXFF-486J-G55W
Bulletin has no description...
MINI-VCG2-3HP9-7Q2J
Bulletin has no description...
MINI-JXFH-M938-C97R
Bulletin has no description...
MINI-2CXX-PQPX-6W97
Bulletin has no description...
MINI-QW95-46HG-XC8M
Bulletin has no description...
MINI-XMQ6-Q9MG-MH96
Bulletin has no description...
MINI-WGC8-V5Q3-843V
Bulletin has no description...
MINI-W9F4-W36Q-8XH9
Bulletin has no description...
MINI-2CGM-X3HJ-WPGH
Bulletin has no description...
CVE-2026-61550 Icinga 2: Improper access control for JSON-RPC update certificate messages
Icinga 2 is an open source monitoring system. From 2.8 until 2.14.9, 2.15.4, and 2.16.2, certificate update JSON-RPC message handling does not validate that the sender is a trusted endpoint. An unauthenticated network attacker able to connect to TCP port 5665 can replace the node certificate and...
MINI-H7VC-PR22-QCJ3
Bulletin has no description...
MINI-2RWH-R9GJ-8GR7
Bulletin has no description...
GHSA-3753-M2X2-Q623 File Viewer: DOM XSS via unsafe hyperlink schemes in the legacy DOC renderer
Summary Before 2.3.1, the legacy .doc renderer emitted document hyperlink targets after HTML escaping but without a URL-scheme allowlist. A crafted .doc could therefore render a live javascript:, vbscript:, data:, or similarly unsafe link. Script could execute in the embedding origin if a viewer...