5154 matches found
CVE-2025-70873
An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file...
GHSA-78CV-MQJ4-43F7 vulnerabilities
Vulnerabilities for packages: dask-kubernetes, mitmproxy, kubeflow-pipelines-visualization-server, airflow...
firefox: thunderbird: Incorrect boundary conditions in the Networking: JAR component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Networking: JAR component...
GHSA-9R5J-7R2X-RV4G vulnerabilities
Vulnerabilities for packages: airflow...
GHSA-RV5F-CCPM-XJJ4 vulnerabilities
Vulnerabilities for packages: airflow...
GHSA-F7PM-6HR8-7GGM vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2025-70873
An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file...
CVE-2026-31853
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-16 and 6.9.13-41, an overflow on 32-bit systems can cause a crash in the SFW decoder when processing extremely large images. This vulnerability is fixed in 7.1.2-16 and 6.9.13-41...
SUSE CVE-2026-3836
unknown...
CVE-2026-3805
When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory...
php: heap-based buffer overflow in array_merge()
A flaw was found in PHP. A heap-based buffer overflow occurs in the arraymerge function when the total element count of packed arrays exceeds the 32-bit limit or the internal HTMAXSIZE due to an integer overflow in the precomputation of element counts using the zendhashnumelements function, causi...
GHSA-W5R5-M38G-F9F9 vulnerabilities
Vulnerabilities for packages: localstack...
GHSA-XPQW-6GX7-V673 vulnerabilities
Vulnerabilities for packages: vitess, librechat, arangodb...
GHSA-WC8C-QW6V-H7F6 vulnerabilities
Vulnerabilities for packages: kibana, wazuh-dashboard, opensearch-dashboards-fips, langfuse-fips, wazuh-dashboard-fips, opensearch-dashboards, librechat, langfuse...
ROS-20260311-73-0015
Vulnerability in expat related to null pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
ROS-20260311-73-0014
Vulnerability in expat related to integer overflow. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
CVE-2026-23113 affecting package kernel for versions less than 6.6.126.1-1
CVE-2026-23113 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...
CVE-2026-23216 affecting package kernel for versions less than 6.6.126.1-1
CVE-2026-23216 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...
CVE-2025-58190 affecting package cloud-provider-kubevirt for versions less than 0.5.1-3
CVE-2025-58190 affecting package cloud-provider-kubevirt for versions less than 0.5.1-3. A patched version of the package is available...