2099128 matches found
MINI-XR4J-F7CQ-4XF3
Bulletin has no description...
MINI-V5QV-PX92-QHCV
Bulletin has no description...
MINI-JHX8-52VV-MFGM
Bulletin has no description...
MINI-XMP5-QV8M-C39V
Bulletin has no description...
MINI-426H-G9PR-CM4P
Bulletin has no description...
MINI-XV66-WCVG-WP72
Bulletin has no description...
MINI-49MG-MM9W-VJ46
Bulletin has no description...
MINI-83Q6-4JP4-4P89
Bulletin has no description...
MINI-CJ7F-7FFM-H4MQ
Bulletin has no description...
MINI-8W5R-74PP-V5FH
Bulletin has no description...
GHSA-JR34-H97M-9HPX nginx ignition has ParseAcceptLanguage `_` separator bypass that enables ~75x CPU amplification via Accept-Language header in i18nMiddleware
Summary The gin i18n middleware in nginx-ignition's API server runs in front of every HTTP request and calls golang.org/x/text/language.ParseAcceptLanguage on the raw Accept-Language header without imposing any size or shape filter. The underlying parser has quadratic-time behaviour on long lists...
GHSA-HF33-Q6CF-C66F nginx ignition has TOTP Reuse During Validity Window
Summary Any user that has enabled the OTP 2FA can have their TOTP reused during the standard 30 second validity window. Details The https://github.com/pquerna/otp package doesn't include checking for already used TOTPs within its the validity window. This requires each application that uses the...
GHSA-JHJP-4C2Q-XMX4 k8saudit shipped rules do not detect privileged/sensitive settings on init or ephemeral containers
The k8saudit plugin's per-container fields ka.req.pod.containers. and the shipped k8sauditrules.yaml evaluated only requestObject.spec.containers. Security-relevant settings on a pod's initContainers or ephemeralContainers were not inspected, so the shipped Create Privileged Pod rule did not fire...
CGA-HV9Q-8XW3-6PJJ
Bulletin has no description...
ROOT-OS-DEBIAN-12-CVE-2026-43725 CVE-2026-43725 in webkit2gtk - Patched by Root
Root has patched CVE-2026-43725 in the webkit2gtk package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-28902 CVE-2026-28902 in webkit2gtk - Patched by Root
Root has patched CVE-2026-28902 in the webkit2gtk package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-43715 CVE-2026-43715 in webkit2gtk - Patched by Root
Root has patched CVE-2026-43715 in the webkit2gtk package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-28953 CVE-2026-28953 in webkit2gtk - Patched by Root
Root has patched CVE-2026-28953 in the webkit2gtk package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-28904 CVE-2026-28904 in webkit2gtk - Patched by Root
Root has patched CVE-2026-28904 in the webkit2gtk package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-43660 CVE-2026-43660 in webkit2gtk - Patched by Root
Root has patched CVE-2026-43660 in the webkit2gtk package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-20664 CVE-2026-20664 in webkit2gtk - Patched by Root
Root has patched CVE-2026-20664 in the webkit2gtk package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-28905 CVE-2026-28905 in webkit2gtk - Patched by Root
Root has patched CVE-2026-28905 in the webkit2gtk package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-28847 CVE-2026-28847 in webkit2gtk - Patched by Root
Root has patched CVE-2026-28847 in the webkit2gtk package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-28859 CVE-2026-28859 in webkit2gtk - Patched by Root
Root has patched CVE-2026-28859 in the webkit2gtk package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-43731 CVE-2026-43731 in webkit2gtk - Patched by Root
Root has patched CVE-2026-43731 in the webkit2gtk package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2024-4367 CVE-2024-4367 in webkit2gtk - Patched by Root
Root has patched CVE-2024-4367 in the webkit2gtk package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-28946 CVE-2026-28946 in webkit2gtk - Patched by Root
Root has patched CVE-2026-28946 in the webkit2gtk package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-28942 CVE-2026-28942 in webkit2gtk - Patched by Root
Root has patched CVE-2026-28942 in the webkit2gtk package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-28907 CVE-2026-28907 in webkit2gtk - Patched by Root
Root has patched CVE-2026-28907 in the webkit2gtk package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-43705 CVE-2026-43705 in webkit2gtk - Patched by Root
Root has patched CVE-2026-43705 in the webkit2gtk package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-28947 CVE-2026-28947 in webkit2gtk - Patched by Root
Root has patched CVE-2026-28947 in the webkit2gtk package for Root:Debian:12. Multiple fixed versions available...
CGA-5H23-35W2-4J84
Bulletin has no description...
MAL-2026-16370 Malicious code in @uol-afiliados/affiliated-config-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2cd4acce57eda08c1b8716118854cad32ecfc59e35e91c03d664ac452ee6716d @uol-afiliados/[email protected] declares a preinstall hook node index.js that shells out via require'childprocess'.exec to run curl...
DEBIAN-CVE-2026-94572
In OpenStack Octavia before 18.0.1, the Amphora provider driver did not validate the listener and pool tlsciphers field for control characters. The value is written verbatim into the HAProxy configuration generated on the amphora, and thus an authenticated project member who owns a TLS-enabled lo...
DEBIAN-CVE-2026-94571
In OpenStack Octavia before 18.0.1, the Amphora provider driver did not reject control characters in the L7 policy redirecturl and redirectprefix fields. The RFC 3986 URL validator percent-encodes control characters before validating, and thus newlines passed structural checks, but Octavia stored...
CGA-F9WF-V672-RMH3
Bulletin has no description...
CGA-G9W6-7PM5-57P6
Bulletin has no description...
CGA-X36C-47VC-57CC
Bulletin has no description...
CGA-PPX9-FFH5-GVPQ
Bulletin has no description...
CGA-8XM2-9P67-XG9W
Bulletin has no description...
CGA-34VW-62XQ-M937
Bulletin has no description...
CGA-5V2G-9V4X-RFRX
Bulletin has no description...
CGA-2HF8-VWVQ-RGVW
Bulletin has no description...
CGA-M947-M6G7-M47V
Bulletin has no description...
CGA-M4C2-23CP-P7VC
Bulletin has no description...
CGA-JQ7V-RHQ9-9R89
Bulletin has no description...
CGA-GPQW-C3P9-42R5
Bulletin has no description...
CGA-M7FX-Q376-4FPM
Bulletin has no description...