4956 matches found
CVE-2026-43086
In the Linux kernel, the following vulnerability has been resolved: ipvs: fix NULL deref in ipvsaddservice error path When ipvsbindscheduler succeeds in ipvsaddservice, the local variable sched is set to NULL. If ipvsstartestimator subsequently fails, the outerr cleanup calls...
github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability
A flaw was found in github.com/jackc/pgx, a PostgreSQL driver for Go. This memory-safety vulnerability could allow an attacker to cause various impacts, such as denial of service DoS or potentially arbitrary code execution, by exploiting memory corruption issues. The exact method of exploitation...
CVE-2026-42037 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, prism, nextcloud-server, kubeflow-katib, kubeflow-centraldashboard, saf, lerna, langfuse, jitsucom-jitsu...
CVE-2026-42258 vulnerabilities
Vulnerabilities for packages: ruby3.4-rails, kube-logging-operator, jruby, logstash-fips, kube-fluentd-operator, gitlab-rails-ce, ruby3.2-rails, ruby4.0-rails, ruby3.2-net-imap, truffleruby, ruby3.3-rails, gitlab-rails-ce-fips, logstash, ruby4.0-net-imap, ruby3.4-net-imap, ruby3.3-net-imap...
ROS-20260506-73-0008
Vulnerability in binutils related to execution of a loop with an unreachable exit condition. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
ROS-20260506-73-0035
Vulnerability in tomcat10 related to a flaw in the output encoding or escaping mechanism. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code...
curl: Fix of 2 CVEs
CVE-2019-5436: tftp: use the current blksize for recvfrom - CVE-2016-8615: cookie: replace use of fgets with custom version...
vim: Fix of CVE-2026-39881
CVE-2026-39881: fix command injection in netbeans interface by validating defineAnnoType typeName/fg/bg and specialKeys tokens against an allowlist of safe characters before interpolating them into Ex commands...
GHSA-M7HM-VM4X-28JF vulnerabilities
Vulnerabilities for packages: dagdotdev...
GHSA-QQ3R-W4HJ-GJP6 vulnerabilities
Vulnerabilities for packages: dagdotdev...
dovecot: denial of service via specially crafted NOOP command
A flaw was found in dovecot. An unauthenticated and remote attacker can send a specially crafted "NOOP" command containing numerous open and close parentheses without a command-ending line feed, causing the server to allocate an excessive amount of memory, resulting in a denial of service...
GHSA-PWV6-VV43-88GR vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, superset, open-webui...
GHSA-HCWR-PQ9G-RQ3M vulnerabilities
Vulnerabilities for packages: dagdotdev, amazon-ssm-agent-fips...
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling...
CVE-2026-44029
An issue was discovered in Nix before 2.34.7. Writing to arbitrary files can occur via "nix-prefetch-url --unpack" or "nix store prefetch-file --unpack" directory traversal. The fixed versions are 2.34.7, 2.33.6, 2.32.8, 2.31.5, 2.30.5, 2.29.4, and 2.28.7 introduced in 2.24.7;...
ROS-20260505-73-0018
A vulnerability in the ElementDeclHandler component of the Python Programming Language Interpreter CPython is related to uncontrolled recursion. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...
ROS-20260505-73-0025
A vulnerability in the appendChild and clearidcache functions of the Python programming language interpreter CPython is related to algorithmic complexity. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...
ROS-20260505-73-0046
A vulnerability in the urllib.request.DataHandler component of the Python programming language interpreter is related to the failure to take measures to neutralize CRLF sequences. Exploitation of the vulnerability may allow a remote attacker to affect the integrity of protected information...
ROS-20260505-73-0047
A vulnerability in the urllib.request.DataHandler component of the Python programming language interpreter is related to the failure to take measures to neutralize CRLF sequences. Exploitation of the vulnerability may allow a remote attacker to affect the integrity of protected information...