1010094 matches found
MINI-6VHG-5GWR-WFH7
Bulletin has no description...
MINI-5X6H-PPV5-FHWW
Bulletin has no description...
CLSA-2026-1787146736 TuxCare security update for tar (2 CVEs)
TuxCare rebuilt tar to address 2 CVEs. Fixed in 2.2.2-tuxcare.2...
CVE-2026-75148 cgltf 1.15 Integer Overflow via cgltf_validate() Accessor Bounds Check
cgltf through 1.15 contains an integer overflow vulnerability in the non-sparse accessor bounds check within cgltfvalidate that allows remote attackers to cause memory disclosure and denial of service by supplying crafted accessor count values. Attackers can provide malformed .gltf or .glb input...
ECHO-FCA2-5D51-7D6D
Bulletin has no description...
ECHO-D825-D451-60E0
Bulletin has no description...
CLSA-2026-1787146516 TuxCare security update for mlflow (1 CVE)
TuxCare rebuilt mlflow to address 1 CVE. Fixed in 2.22.4.post7+tuxcare...
ROOT-APP-PYPI-CVE-2026-39892 CVE-2026-39892 in cryptography - Patched by Root
Root has patched CVE-2026-39892 in the cryptography package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-69249 CVE-2026-69249 in cryptography - Patched by Root
Root has patched CVE-2026-69249 in the cryptography package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-537C-GMF6-5CCF GHSA-537c-gmf6-5ccf in cryptography - Patched by Root
Root has patched GHSA-537c-gmf6-5ccf in the cryptography package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-69247 CVE-2026-69247 in cryptography - Patched by Root
Root has patched CVE-2026-69247 in the cryptography package for Root:PyPI. Multiple fixed versions available...
JLSEC-2026-1345 GNU Bison allows for an execution of an arbitrary program during HTML report generation due to...
GNU Bison allows for an execution of an arbitrary program during HTML report generation due to improper handling of grammar-defined configuration variables. A grammar file can override the executable used for the XML‑to‑HTML transformation step via %define tool.xsltproc, which is accepted without...
JLSEC-2026-1346 GNU Bison improperly handles grammar‑defined output paths. Grammar directives such as %output and...
GNU Bison improperly handles grammar‑defined output paths. Grammar directives such as %output and %header allow specifying file paths, which are accepted without restriction and override caller‑supplied output options. When processing attacker-supplied grammar, this behavior allows directing...
CVE-2026-65612 Shell Command Injection in nnn
nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or inside an extracted archive whose name contains a single quote followed by shell syntax. If the victim navigates to that file and opens it with preview-tabbed,...
CVE-2026-65611 Shell Command Injection in nnn
nnn does not sanitize the path variable. An attacker can create a directory on a shared filesystem, removable media, or inside an extracted archive whose name contains a single quote followed by shell syntax. If the victim enters that directory in nnn and uses the batch copy or move workflow, the...
CVE-2026-65610 Numeric Truncation Error in nnn
nnn stores homelen variable as uchart, which can only represent values in the range 0-255. An attacker who can influence the victim's execution environment can provide an arbitrary HOME path with length that is truncated to 0. The expression homelen - 1 is promoted to signed int and becomes -1 an...
CVE-2026-65609 Out-of-bounds write in nnn
nnn is vulnerable to Out-of-Bound write vulnerability. Due to lack of validation of attacker-controlled length fields deserialized from a session file, a crafted session file can cause nnn to write data beyond the bounds of fixed-size global buffers when loaded with the -s option. An attacker who...
DEBIAN-CVE-2026-76235
A memory leak flaw was found in cockpit-ws. The login page handler leaks a heap allocation on every unauthenticated request that carries a CockpitLang cookie, allowing a remote unauthenticated attacker to exhaust memory on the host and cause a denial of service...
CLSA-2026-1787145440 TuxCare security update for org.springframework.security (4 CVEs)
TuxCare rebuilt 19 org.springframework.security packages to address 4 CVEs. Fixed in 6.2.8-tuxcare.3...
CLSA-2026-1787145403 TuxCare security update for org.springframework.data (1 CVE)
TuxCare rebuilt 3 org.springframework.data packages to address 1 CVE. Fixed in 4.4.13-tuxcare.1...
CLSA-2026-1787145317 TuxCare security update for org.springframework.data (4 CVEs)
TuxCare rebuilt 4 org.springframework.data packages to address 4 CVEs. Fixed in 3.4.13-tuxcare.1...
ROOT-APP-NPM-CVE-2025-7783 CVE-2025-7783 in form-data - Patched by Root
Root has patched CVE-2025-7783 in the form-data package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-9277 CVE-2026-9277 in shell-quote - Patched by Root
Root has patched CVE-2026-9277 in the shell-quote package for Root:npm. Multiple fixed versions available...
CLSA-2026-1787144963 TuxCare security update for org.springframework.data (4 CVEs)
TuxCare rebuilt 5 org.springframework.data packages to address 4 CVEs. Fixed in 3.4.13-tuxcare.1...
CLSA-2026-1787144764 TuxCare security update for org.springframework.data (1 CVE)
TuxCare rebuilt 5 org.springframework.data packages to address 1 CVE. Fixed in 4.4.13-tuxcare.1...
CLSA-2026-1787144370 TuxCare security update for org.springframework.data:spring-data-ldap (4 CVEs)
TuxCare rebuilt org.springframework.data:spring-data-ldap to address 4 CVEs. Fixed in 3.4.13-tuxcare.1...
ROOT-OS-UBUNTU-2404-CVE-2026-27456 CVE-2026-27456 in util-linux - Patched by Root
Root has patched CVE-2026-27456 in the util-linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2024-37890 CVE-2024-37890 in ws - Patched by Root
Root has patched CVE-2024-37890 in the ws package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-48779 CVE-2026-48779 in ws - Patched by Root
Root has patched CVE-2026-48779 in the ws package for Root:npm. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-41066 CVE-2026-41066 in lxml - Patched by Root
Root has patched CVE-2026-41066 in the lxml package for Root:PyPI. Multiple fixed versions available...
ROOT-OS-UBUNTU-2510-CVE-0000-0000 CVE-0000-0000 in bash - Patched by Root
Root has patched CVE-0000-0000 in the bash package for Root:Ubuntu:25.10. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-24880 CVE-2026-24880 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root
Root has patched CVE-2026-24880 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-24734 CVE-2026-24734 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root
Root has patched CVE-2026-24734 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-43515 CVE-2026-43515 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root
Root has patched CVE-2026-43515 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-43512 CVE-2026-43512 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root
Root has patched CVE-2026-43512 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-41293 CVE-2026-41293 in org.apache.tomcat.embed:tomcat-embed-core - Patched by Root
Root has patched CVE-2026-41293 in the org.apache.tomcat.embed:tomcat-embed-core package for Root:Maven. Multiple fixed versions available...
USN-8649-1 libheif vulnerabilities
It was discovered that libheif had an integer underflow in the Fraction constructor when a clap transform was applied twice. An attacker could possibly use this issue to cause libheif to crash, resulting in a denial of service. CVE-2026-62289 It was discovered that libheif had an out-of-bounds re...
ROOT-OS-DEBIAN-11-CVE-2022-48623 CVE-2022-48623 in libcpanel-json-xs-perl - Patched by Root
Root has patched CVE-2022-48623 in the libcpanel-json-xs-perl package for Root:Debian:11. Multiple fixed versions available...
CLSA-2026-1787142559 TuxCare security update for django (1 CVE)
TuxCare rebuilt django to address 1 CVE. Fixed in 3.2.25.post3+tuxcare...
CGA-QJG5-83W4-3P7W
Bulletin has no description...
ROOT-APP-PYPI-CVE-2023-39631 CVE-2023-39631 in numexpr - Patched by Root
Root has patched CVE-2023-39631 in the numexpr package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-23897 CVE-2026-23897 in @apollo/server - Patched by Root
Root has patched CVE-2026-23897 in the @apollo/server package for Root:npm. Multiple fixed versions available...
MAL-2026-14309 Malicious code in @idanefraim/my-ui-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24017bfaf88f4ffe9c661b8ff489bded977a522bcc9ace9bf7289b11fdf37f84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
ROOT-OS-UBUNTU-2004-CVE-2025-48384 CVE-2025-48384 in git - Patched by Root
Root has patched CVE-2025-48384 in the git package for Root:Ubuntu:20.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2004-CVE-2026-41651 CVE-2026-41651 in packagekit - Patched by Root
Root has patched CVE-2026-41651 in the packagekit package for Root:Ubuntu:20.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2004-CVE-2025-68973 CVE-2025-68973 in gnupg2 - Patched by Root
Root has patched CVE-2025-68973 in the gnupg2 package for Root:Ubuntu:20.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2004-CVE-2026-45447 CVE-2026-45447 in openssl - Patched by Root
Root has patched CVE-2026-45447 in the openssl package for Root:Ubuntu:20.04. Multiple fixed versions available...
CLSA-2026-1787141079 TuxCare security update for log4j:log4j (1 CVE)
TuxCare rebuilt log4j:log4j to address 1 CVE. Fixed in 1.2.16-tuxcare.2...
USN-8563-3 nginx vulnerability
USN-8563-1 fixed vulnerabilities in nginx. The fix for CVE-2026-42533 was backed out in USN-8563-2 because it could cause a regression. This update includes a better fix for CVE-2026-42533. We apologize for the inconvenience. Original advisory details: It was discovered that nginx incorrectly...