5153 matches found
ROS-20260320-73-0005
Vulnerability in jenkins due to failure to take measures to protect web page structure. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...
ROS-20260320-73-0010
A vulnerability in the Golang programming language is related to insufficient control of a resource during its existence. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
GHSA-WJ64-GH9J-XM82 vulnerabilities
Vulnerabilities for packages: openssl...
GHSA-P77J-4MVH-X3M3 vulnerabilities
Vulnerabilities for packages: kwok, cosign, rancher-fleet, docker, juicefs, calico, vexctl, terraform-provider-acme, cluster-api-aws-controller, velero-plugin-for-aws, vitess, kubernetes-csi-external-resizer, crossplane-provider-aws-elasticache, jitsucom-bulker, tfsec, sigstore-scaffolding, dapr,...
GHSA-XH32-C9WX-PHRP vulnerabilities
Vulnerabilities for packages: keycloak-fips, keycloak...
GHSA-Q5QW-H33P-QVWR vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards, kibana, librechat...
GHSA-4992-7RV2-5PVQ vulnerabilities
Vulnerabilities for packages: code-server, langfuse, jitsucom-jitsu, langfuse-fips, librechat, gemini-cli, kibana, pelias-api, renovate...
SUSE CVE-2026-27459
pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to setcookiegeneratecallback returned a cookie value greater than 256 bytes, pyOpenSSL would overflow an OpenSSL provided buffer. Starting in version 26.0....
ROS-20260319-73-0031
Vulnerability in glpi related to failure to take measures to protect sql query structure. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...
ROS-20260319-73-0007
Vulnerability in glpi related to failure to take measures to protect sql query structure. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...
ROS-20260319-73-0034
Vulnerability in beats related to writing outside buffer boundaries in memory. Exploitation of the vulnerability may allow an attacker to execute arbitrary code...
CVE-2026-31969
HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data using a variety of encodings and compression methods. When reading data encoded using the BYTEARRAYSTOP method, an out-by-one error in the...
CVE-2026-29777 vulnerabilities
Vulnerabilities for packages: traefik-fips, traefik...
CVE-2025-10966 affecting package cmake for versions less than 3.21.4-22
CVE-2025-10966 affecting package cmake for versions less than 3.21.4-22. A patched version of the package is available...
CVE-2026-23943 affecting package erlang for versions less than 25.3.2.21-5
CVE-2026-23943 affecting package erlang for versions less than 25.3.2.21-5. A patched version of the package is available...
CVE-2026-23942 affecting package erlang for versions less than 25.3.2.21-5
CVE-2026-23942 affecting package erlang for versions less than 25.3.2.21-5. A patched version of the package is available...
CVE-2026-23246
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bounds-check linkid in ieee80211mlreconfiguration linkid is taken from the ML Reconfiguration element control & 0x000f, so it can be 0..15. linkremovaltimeout has IEEE80211MLDMAXNUMLINKS 15 elements, so index 15 i...
CVE-2026-23244
In the Linux kernel, the following vulnerability has been resolved: nvme: fix memory allocation in nvmeprreadkeys nvmeprreadkeys takes numkeys from userspace and uses it to calculate the allocation size for rse via structsize. The upper limit is PRKEYSMAX 64K. A malicious or buggy userspace can...
GHSA-JR27-M4P2-RC6R vulnerabilities
Vulnerabilities for packages: dbt-bigquery, mlflow, authentik, kubeflow-volumes-web-app, datadog-agent-fips, apache-beam-python-3.13-sdk, authentik-fips, metaflow-service, barman, airflow, kubeflow-pipelines-visualization-server, gitlab-cng, litellm, kubeflow-jupyter-web-app, synapse, awx,...