5154 matches found
SUSE CVE-2026-27026
pypdf is a free and open-source pure-python PDF library. Prior to 6.7.1, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires a malformed /FlateDecode stream, where the byte-by-byte decompression is used. This vulnerability is fixed in 6.7.1...
ROS-20260224-73-0017
Vulnerability in moodle due to insufficient limitation of authentication attempts. Exploitation of the vulnerability could allow a remote attacker to launch a brute force attack...
ROS-20260224-73-0004
Vulnerability in gimp related to buffer overflow in dynamic memory. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...
ROS-20260224-73-0007
Vulnerability in gimp related to stack buffer overflow. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...
freerdp: FreeRDP: Arbitrary code execution and denial of service via malicious server
A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. A malicious server can exploit a use-after-free vulnerability by enticing a client to connect to it. This can lead to a client-side crash, resulting in a Denial of Service DoS, and potentially allow for arbitrary...
GHSA-QQ5R-98HH-RXC9 vulnerabilities
Vulnerabilities for packages: thingsboard...
GHSA-GQ3J-XVXP-8HRF vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, librechat, opensearch-dashboards, kibana, langfuse, langfuse-fips...
CVE-2026-26157 affecting package busybox for versions less than 1.35.0-17
CVE-2026-26157 affecting package busybox for versions less than 1.35.0-17. A patched version of the package is available...
GHSA-27JP-WM6Q-GP25 vulnerabilities
Vulnerabilities for packages: superset...
java-11-openjdk security update
1:11.0.31.0.1-1.0.1 - Update to jdk-11.0.31+1 Orabug: 38950473 - Fixes CVE-2025-64720 CVE-2025-65018 CVE-2026-21925 - CVE-2026-21933 CVE-2026-21945...
CVE-2026-27171
zlib before 1.3.2 allows CPU consumption via crc32combine64 and crc32combinegen64 because x2nmodp can do right shifts within a loop that has no termination condition...
CVE-2025-33130
IBM DB2 Merge Backup for Linux, UNIX and Windows 12.1.0.0 could allow an authenticated user to cause the program to crash due to a buffer being overwritten when it is allocated on the stack...
CVE-2025-66614
Improper Input Validation vulnerability. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.14, from 10.1.0-M1 through 10.1.49, from 9.0.0-M1 through 9.0.112. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 through 8.5.100. Older EOL...
CVE-2025-32049 affecting package libsoup for versions less than 3.0.4-11
CVE-2025-32049 affecting package libsoup for versions less than 3.0.4-11. A patched version of the package is available...
CVE-2026-1094 vulnerabilities
Vulnerabilities for packages: gitlab-runner, gitlab-runner-fips, gitlab-pages-fips, gitlab-rails-ce-fips...
ROS-20260216-73-0016
Vulnerability in gpac related to incorrect resource cleanup or release. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
ROS-20260216-73-0010
Vulnerability in wireshark related to execution of a loop with an unreachable exit condition. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
ROS-20260216-73-0017
Vulnerability in gpac related to incorrect resource cleanup or release. Exploitation of the vulnerability could allow an attacker to cause a denial of service...