59956 matches found
DEBIAN-CVE-2026-111759
Bulletin has no description...
DEBIAN-CVE-2026-111925
Bulletin has no description...
DEBIAN-CVE-2026-112282
Bulletin has no description...
DEBIAN-CVE-2026-112283
Bulletin has no description...
DEBIAN-CVE-2026-112307
Bulletin has no description...
DEBIAN-CVE-2026-112279
Bulletin has no description...
DEBIAN-CVE-2026-112094
Bulletin has no description...
DEBIAN-CVE-2026-112277
Bulletin has no description...
DEBIAN-CVE-2026-112278
Bulletin has no description...
DEBIAN-CVE-2026-112275
Bulletin has no description...
DEBIAN-CVE-2026-112259
Bulletin has no description...
DEBIAN-CVE-2026-112273
Bulletin has no description...
DEBIAN-CVE-2026-112274
Bulletin has no description...
DEBIAN-CVE-2026-112276
Bulletin has no description...
DEBIAN-CVE-2026-112368
Bulletin has no description...
DEBIAN-CVE-2026-112366
Bulletin has no description...
DEBIAN-CVE-2026-110676
Bulletin has no description...
DEBIAN-CVE-2026-110680
Bulletin has no description...
DEBIAN-CVE-2026-110682
Bulletin has no description...
DEBIAN-CVE-2026-110677
Bulletin has no description...
DEBIAN-CVE-2026-110681
Bulletin has no description...
DEBIAN-CVE-2026-110672
Bulletin has no description...
DEBIAN-CVE-2026-110674
Bulletin has no description...
DEBIAN-CVE-2026-110684
Bulletin has no description...
DEBIAN-CVE-2026-110686
Bulletin has no description...
DEBIAN-CVE-2026-110675
Bulletin has no description...
DEBIAN-CVE-2026-8168
Bulletin has no description...
DEBIAN-CVE-2026-110688
Bulletin has no description...
DEBIAN-CVE-2026-110673
Bulletin has no description...
DEBIAN-CVE-2026-110685
Bulletin has no description...
DEBIAN-CVE-2026-110678
Bulletin has no description...
DEBIAN-CVE-2026-110687
Bulletin has no description...
DEBIAN-CVE-2026-111997
ip-address before 10.7.4 allows a denial of service CPU consumption from quadratic complexity, and application stall via many % characters in input reaching a function call that uses the Address6 constructor...
DEBIAN-CVE-2026-112010
smpeg through 2.0.0 contains an integer underflow vulnerability in streamheader in MPEGsystem.cpp that allows attackers to wrap packetsize by declaring an undersized packet length. Attackers can supply a crafted MPEG file opened via SMPEGnew, SMPEGnewrwops or SMPEGnewdata to trigger a reachable...
DEBIAN-CVE-2026-112007
Schism Tracker through 20260524 contains a heap out-of-bounds write vulnerability in fmtultloadsong in fmt/ult.c that fails to clamp the one-byte sample count to MAXSAMPLES. Attackers can supply a crafted .ult module that overwrites the instruments pointer array, causing csfdestroy to free...
DEBIAN-CVE-2026-112008
libmng through 2.0.3 contains a heap-based buffer overflow vulnerability in mngreadordr that allows attackers to corrupt heap memory because ORDR entry buffers are sized by 5-byte on-wire records instead of 8-byte in-memory entries. Attackers can supply a crafted MNG file with MHDR, DHDR and a...
DEBIAN-CVE-2026-112009
smpeg through 2.0.0 contains a heap out-of-bounds read vulnerability in MPEGsystem::FillBuffer that allows attackers to read past the 16384-byte buffer by supplying a crafted system header stream table. Attackers can provide an MPEG file whose stream table bytes all set the high bit, which crashe...
DEBIAN-CVE-2026-112006
OpenTelemetry opentelemetry-exporter-otlp-proto-http 1.5.0 before 1.45.0 contains an improper certificate validation vulnerability that disables TLS verification when OTELEXPORTEROTLPCERTIFICATE variables are empty strings. Man-in-the-middle attackers can impersonate the collector to read or alte...
DEBIAN-CVE-2026-112036
A vulnerability was detected in Artifex MuPDF up to 1.28.5. This impacts the function freecharlist of the file source/pdf/pdf-xref.c of the component Signature Locking. Performing a manipulation results in double free. The attack may be initiated remotely. The exploit is now public and may be use...
DEBIAN-CVE-2026-112112
An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon allows an established BGP peer to inject FlowSpec rules matching destinations outside the address space authorized by the unicast-route validation procedure. With validation enabled on the receiving flow6 channel, BIRD...
DEBIAN-CVE-2026-110333
Bulletin has no description...
DEBIAN-CVE-2026-110334
Bulletin has no description...
DEBIAN-CVE-2026-110336
Bulletin has no description...
DEBIAN-CVE-2026-112055
wvWare wv through 1.2.9 contains a stack-based out-of-bounds read vulnerability in wvGetPAPXFKP and wvGetCHPXFKP caused by an unvalidated FKP run count. Attackers can supply a crafted .doc file with a large crun value to read kilobytes past the 512-byte stack buffer, crashing applications like...
DEBIAN-CVE-2026-112057
libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnavdescribetitlechapters that allows attackers to read beyond the part-of-title array by supplying an oversized vtsttn value. Attackers can provide a crafted DVD or disc image declaring a larger VMGI title vtsttn than t...
DEBIAN-CVE-2026-110332
Bulletin has no description...
DEBIAN-CVE-2026-112046
OW2 ASM 9.11 before 9.11.1 contains an infinite loop vulnerability in Label.resolve caused by 16-bit forward-reference offsets truncating when rewritten methods exceed 64 KB. Attackers can supply crafted class files whose transformed code grows past 65535 bytes, hanging ClassReader.accept and...
DEBIAN-CVE-2026-112056
wvWare wv through 1.2.9 contains a heap-based out-of-bounds read vulnerability in wvGetSTSH in stylesheet.c that allows attackers to crash applications by supplying crafted Word stylesheets. Attackers can provide a .doc file with ten or fewer styles or out-of-range style base indexes to read past...
DEBIAN-CVE-2026-110335
Bulletin has no description...
DEBIAN-CVE-2026-112058
VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read vulnerability in setPTT that allows attackers to crash applications by supplying an invalid JumpTT title number checked only by an assert. Attackers can craft a DVD or disc image whose First Play program chain issues JumpTT with titl...