4954 matches found
SUSE CVE-2026-42001
Insufficient Validation of Autoprimary SOA Queries...
SUSE CVE-2026-47251
libheif is a HEIF and AVIF file format decoder and encoder. The fix for CVE-2026-3949 commit b97c8b5, PR 1712 introduced an integer overflow in the very security check it added. The check itself can be bypassed, allowing a crafted HEIF file with a VVC track to trigger the same out-of-bounds heap...
CVE-2026-39827
An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users. Rejected channels are now properly removed from the connection's internal state and released for...
GHSA-6FHV-H367-4JC4 vulnerabilities
Vulnerabilities for packages: firefox-esr, firefox...
GHSA-5HRC-GVXJ-W55P vulnerabilities
Vulnerabilities for packages: py3-django...
quagga: Fix of CVE-2018-5380
CVE-2018-5380: fix BGP NOTIFY debug-print msg array over-read...
CVE-2026-42001
Insufficient Validation of Autoprimary SOA Queries...
CVE-2026-42306 vulnerabilities
Vulnerabilities for packages: opentelemetry-operator, trivy, rancher-agent, nuclei, trivy-operator, rancher-machine, ko, zot, envoy-gateway, skopeo, rancher, spire-server, portieris, buildah, nerdctl, podman, amazon-cloudwatch-agent-operator, aws-otel-collector, grafana, undock, k8sgpt...
[SECURITY] Fedora 44 Update: erlang-cowlib-2.16.1-1.fc44
Support library for manipulating Web protocols...
CVE-2026-34002 vulnerabilities
Vulnerabilities for packages: xorg-server...
GHSA-4463-8RVF-RJ9F vulnerabilities
Vulnerabilities for packages: pgbouncer...
GHSA-M7CR-M3PV-HGRP vulnerabilities
Vulnerabilities for packages: gptscript, syft, kyverno, pulumi-kubernetes-operator, witness, pulumi-language-yaml, trivy, src-fingerprint, gitlab-runner, wolfictl, flux, nuclei, grype, steampipe, pulumi-language-java, crossplane, trivy-operator, trufflehog, external-secrets-operator, argo-cd,...
CVE-2026-46378 vulnerabilities
Vulnerabilities for packages: vale...
GHSA-MHMX-MJV6-W337 vulnerabilities
Vulnerabilities for packages: pgbouncer...
golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS
A flaw in golang.org/x/crypto/ssh/agent causes the SSH agent client to panic when a peer responds with the generic SSHAGENTSUCCESS 0x06 message to requests expecting typed replies e.g., List, Sign. The unmarshal layer produces an unexpected message type, which the client code does not handle,...
CVE-2026-5947
Undefined behavior may result due to a race condition leading to a use-after-free violation. If BIND receives an incoming DNS message signed with SIG0, it begins work to validate that signature. If, during that validation, the "recursive-clients" limit is reached as would occur during a query...
libsndfile: integer overflow in ima_reader_init()
A flaw was found in the libsndfile library. An integer overflow in the IMA ADPCM codec can occur when a specially crafted WAV audio file is processed, specifically with malicious samplesperblock and blocks values. This can lead to a heap-based buffer overflow, causing a crash to the application...
CVE-2026-41292
NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to a degradation of service attack related to parsing long lists of incoming EDNS options. An adversary sending queries with too many EDNS options can hold Unbound threads hostage while they are parsing and creating internal data...