5641 matches found
GHSA-G27C-Q7CP-MHX6 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
CVE-2026-50185 vulnerabilities
Vulnerabilities for packages: mountpoint-s3, deno, yazi, pixi...
CVE-2026-53632 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF sequences in unvalidated input
A flaw was found in Net::IMAP before 0.4.24, 0.5.14, and 0.6.4. Several commands accept raw string arguments sent to the server without validation or escaping; if derived from user-controlled input, CRLF sequences allow injection of arbitrary IMAP commands...
CVE-2026-8926
When asking curl to use a .netrc file to find credentials and at the same time specifying a URL with a username without a password, like https://[email protected]/, curl could wrongly get and use the password for another user set in the .netrc file for that host if such a one exists and there is n...
SUSE CVE-2026-14330
Multiple unbounded alloca calls in the PulseAudio protocol server...
ROS-20260703-73-0019
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260703-73-0015
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
GHSA-2XF2-GJM6-G2C6 vulnerabilities
Vulnerabilities for packages: mods...
GHSA-FX2H-PF6J-XCFF vulnerabilities
Vulnerabilities for packages: langfuse-fips, gitlab-rails-ce, commercial-gitlab-rails-ee-fips, nextcloud-server, gitlab-rails-ce-fips, commercial-gitlab-rails-ee, langfuse...
GHSA-5QMP-9X47-92Q8 vulnerabilities
Vulnerabilities for packages: harvester, harvester-fips...
GHSA-RM97-X556-Q36H vulnerabilities
Vulnerabilities for packages: jupyter-base-notebook, py3-jupyterlab...
CVE-2025-53884 vulnerabilities
Vulnerabilities for packages: neuvector-scanner...
CVE-2026-24512 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
GHSA-JX8C-56MG-H6VP vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller...
CVE-2026-55952
The Erlang/OTP ssl application does not validate that the PSK identity list and binder list carried in a TLS 1.3 ClientHello pre-shared key extension have equal length before passing them to the session ticket handler. In tlshandshake13:handlepresharedkey/3, an OfferedPreSharedKeys record with a...
HdrHistogram: HdrHistogram: Data integrity impact due to incorrect comparison
A flaw was found in HdrHistogram. This vulnerability affects the DoubleHistogram.recordValue function, which is part of the Range Check component. A local attacker can exploit this flaw by performing a specific manipulation, leading to an incorrect comparison of values. This issue primarily impac...
CVE-2024-52281 vulnerabilities
Vulnerabilities for packages: harvester, harvester-fips...