2112194 matches found
CGA-QPQJ-HMJG-53X4
Bulletin has no description...
CGA-GH5W-2CV9-W9X5
Bulletin has no description...
CGA-P9J4-H4QX-WVVQ
Bulletin has no description...
CGA-8VGQ-VJVV-366F
Bulletin has no description...
CGA-X8W2-FXF9-9HHG
Bulletin has no description...
CVE-2026-96675 alsa-lib through 1.2.16.1 Denial of Service via pcm_multi
alsa-lib through 1.2.16.1 contains a denial of service vulnerability in the multi PCM plugin that fails to validate sparse binding indices before array access. Attackers can supply a malicious ALSA configuration file with sparse bindings to trigger an out-of-bounds array read and assertion failur...
CVE-2026-96674 alsa-lib through 1.2.16.1 Integer Overflow via Topology File
alsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src/topology/ctl.c, allowing integer overflow that defeats bounds checks. Attackers can supply crafted topology files that wrap size calculations, causing the decoder to read beyond the topology buffer an...
CVE-2026-96673 Photoview through 2.4.0 SQL Injection via album download route
Photoview through 2.4.0 contains an SQL injection vulnerability in the album download route that allows unauthenticated attackers to inject SQL by manipulating the albumid path segment. Attackers can supply crafted SQL expressions in the albumid parameter to extract arbitrary data from the databa...
CVE-2026-96672 Frappe ERPNext before 16.34.1 Unauthorized Method Invocation
Frappe ERPNext versions before 16.34.1 fail to validate that Financial Report Template calculationformula values reference whitelisted methods before passing them to frappe.call. Accounts Managers can supply arbitrary dotted Python paths to invoke non-whitelisted internal server-side methods and...
CLSA-2026-1790177674 TuxCare security update for browserslist (2 CVEs)
TuxCare rebuilt browserslist to address 2 CVEs. Fixed in 4.13.0-tuxcare.3...
CGA-86G9-H2VH-HCQJ
Bulletin has no description...
CGA-GQJW-98PG-6HRX
Bulletin has no description...
CGA-8HWJ-66WJ-5J6C
Bulletin has no description...
CGA-GR9W-54HC-H32W
Bulletin has no description...
CGA-5PVJ-WXX6-M63V
Bulletin has no description...
CGA-7VC5-9MX2-QGGJ
Bulletin has no description...
CGA-VVWW-Q7GH-2V86
Bulletin has no description...
CGA-XX74-G5VC-WXM2
Bulletin has no description...
CGA-RV3R-WV3J-934J
Bulletin has no description...
CGA-J8JC-G2H9-3XG8
Bulletin has no description...
CGA-XVMH-VPVV-Q8RX
Bulletin has no description...
CGA-4GCH-F9JP-RC33
Bulletin has no description...
CGA-5W2C-QX6Q-XF7P
Bulletin has no description...
CGA-7P44-G8C2-9562
Bulletin has no description...
CGA-FQ87-4FH9-2PQR
Bulletin has no description...
CGA-8H5G-2V2C-H7G2
Bulletin has no description...
CGA-4MFG-GRH2-JPJM
Bulletin has no description...
CGA-XV9C-4R7H-8WVP
Bulletin has no description...
CGA-2C9G-PRM4-6M8P
Bulletin has no description...
CGA-4C99-5XRJ-XJ3M
Bulletin has no description...
CGA-4XX5-5294-XW6C
Bulletin has no description...
CGA-CF36-X4XR-F4WR
Bulletin has no description...
CGA-CR8J-97W8-35CQ
Bulletin has no description...
CGA-HPQ7-635R-J8G9
Bulletin has no description...
CGA-WMG2-43XF-C9F7
Bulletin has no description...
CGA-8WP2-5M2W-CWMG
Bulletin has no description...
CGA-M5J8-WV4Q-WHJW
Bulletin has no description...
CGA-7J6P-X5Q2-M7J5
Bulletin has no description...
CGA-RCHC-XHG7-VV83
Bulletin has no description...
CGA-C62R-5288-6PF7
Bulletin has no description...
CGA-39X7-3V4X-7R6P
Bulletin has no description...
CGA-F825-768P-643F
Bulletin has no description...
CGA-8Q25-45CR-39QJ
Bulletin has no description...
ECHO-AABB-F88E-39BF
Bulletin has no description...
ECHO-9545-5F3D-26BB
Bulletin has no description...
ECHO-9954-5EE2-FAAC
Bulletin has no description...
DEBIAN-CVE-2026-96611
FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In movreadispe, uint32t width/height values from a crafted HEIF ispe box are stored into signed int fields without bounds checking, allowing values exceeding INTMAX to become negative. In readimagegrid, accumulating these value...
DEBIAN-CVE-2026-96276
If a malicious SDK container declares an extension point with a crafted directory path, and a developer runs flatpak build-init --writable-sdk --sdk-extension with that SDK, attacker-chosen files could be written outside the working directory, since the target path is resolved via a function that...
DEBIAN-CVE-2026-96275
A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via extractextradata. On system installs, the write happens as root. Two issues combine: files/extra is resolved via path operations that follow symlinks, and blob nam...
DEBIAN-CVE-2026-92164
Streamlink is a CLI utility which pipes video streams from various services into a video player. Prior to 8.6.0, HTTPSession mounts a FileAdapter for the file scheme and inherits redirect handling from requests.Session without rejecting cross-protocol redirects. A remote server controlling an HTT...