2103451 matches found
MAL-2026-16895 Malicious code in bumxler (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16894 Malicious code in bumuler (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16893 Malicious code in bumsler (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16892 Malicious code in bumsdler (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16891 Malicious code in bumrler (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16890 Malicious code in bumrdler (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16888 Malicious code in bumodler (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16889 Malicious code in bumoler (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
UBUNTU-CVE-2026-86805
A time-of-check to time-of-use TOCTOU race condition in the dynamic loader ld.so of the GNU C Library glibc versions 2.14 through 2.44 allows a local attacker to escalate privileges. When expanding $ORIGIN in DTRPATH for setuid/setgid ATSECURE programs, glibc validates the lexically normalized...
UBUNTU-CVE-2026-81878
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecode .pyc marshal parser was vulnerable because the CPython marshal readers accepted a 32-bit string length without rejecting values that overflow the size-plus-one allocation. The...
UBUNTU-CVE-2026-90462
A flaw was found in SSSD. When configured with the LDAP access provider and ldapaccessorder including ppolicy or lockout, a fail-open condition in the LDAP ppolicy access check can occur if a user lookup returns zero results. This can incorrectly return success and cache an allow decision,...
UBUNTU-CVE-2026-81880
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Apple Preferred Executable Format loader was vulnerable because the PEF loader accepted relocSecCount values that were not bounded by the number of sections or complete relocation records in t...
UBUNTU-CVE-2026-81884
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O LCDATAINCODE parser was vulnerable because the Mach-O LCDATAINCODE parser trusted dataoff and datasize and allowed a final partial record to be processed. The vulnerability is triggered...
UBUNTU-CVE-2026-81886
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Windows 64-bit crash-dump dmp64 parser was vulnerable because the Windows dmp64 parser used an input-controlled physical-memory-run PageCount directly as the bound of a per-page allocation loo...
UBUNTU-CVE-2026-81885
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's NE relocation fixup-chain parser was vulnerable because the NE relocation parser followed fixup chains without an active iteration limit or cycle detection. The vulnerability is triggered by...
UBUNTU-CVE-2026-81883
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Lua 5.3 bytecode function parser was vulnerable because the Lua 5.3 bytecode function parser read fixed function-metadata fields immediately after a function-name string without checking the...
MAL-2026-16887 Malicious code in bumndler (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
UBUNTU-CVE-2026-94640
A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service DoS by sending a large number of unique requests. The rpcbind service records previously unseen RPC Remote Procedure Call statistics in unbounded in-memory lists, leading to...
UBUNTU-CVE-2026-81881
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O Swift field-metadata parser was vulnerable because a relative Swift field pointer could be lower than the field-metadata section base, making subtraction produce a negative logical inde...
UBUNTU-CVE-2026-81882
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's binary property-list Unicode parser was vulnerable because the binary-property-list Unicode parser underallocated an uninitialized UTF-8 destination and did not guarantee NUL termination. The...
UBUNTU-CVE-2026-81879
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's ELF PNXNUM handling was vulnerable because the ELF parser allocated the program-header array using the resolved PNXNUM count but several consumers still iterated with the original ephnum value...
MAL-2026-16886 Malicious code in bummdler (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16885 Malicious code in bumler (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16884 Malicious code in bumldler (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16883 Malicious code in bumlder (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
DEBIAN-CVE-2026-79311
webpy web.py 0.76 is vulnerable to Cross Site Scripting XSS via renderjinja.init...
MAL-2026-16882 Malicious code in bumiler (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
DEBIAN-CVE-2026-79312
webpy web.py 0.76 is vulnerable to Session Fixation. The component Session.load reads sessionid directly from the request cookie and loads that session from the store, and save writes back under the same sessionid; no rotation after authentication, so a fixed sessionid keeps the authenticated sta...
MAL-2026-16880 Malicious code in bumfler (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16881 Malicious code in bumidler (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16879 Malicious code in bumeler (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16877 Malicious code in bumduer (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16876 Malicious code in bumdsler (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16878 Malicious code in bumedler (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16875 Malicious code in bumdrler (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16874 Malicious code in bumdper (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
DEBIAN-CVE-2026-63374
AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Prior to 4.14.2, connecttcp and TLSStream.wrap can validate internationalized host names after the standard library converts them with IDNA 2003 instead of IDNA 2008. When a...
MAL-2026-16872 Malicious code in bumdoer (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16873 Malicious code in bumdoler (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16871 Malicious code in bumdnler (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16869 Malicious code in bumdlur (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16870 Malicious code in bumdlwr (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16868 Malicious code in bumdlsr (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16867 Malicious code in bumdlser (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16866 Malicious code in bumdlrr (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16864 Malicious code in bumdlre (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16865 Malicious code in bumdlrer (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16863 Malicious code in bumdlr (RubyGems)
--- -= Per source details. Do not edit below this line.=-...