5630 matches found
CVE-2026-79771 vulnerabilities
Vulnerabilities for packages: ruby3.3-rails, ruby4.0-rails, ruby3.2-rails, kube-logging-operator, ruby3.4-rails...
SUSE CVE-2026-13608
A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic verification. An attacker executing a Man-in-the-Middle MITM attack can inject a premature or shortcut response that bypasses complete peer...
SUSE CVE-2026-71223
unknown...
SUSE CVE-2026-80229
When performing transfers via libcurl's multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...
SUSE CVE-2026-80230
When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...
GHSA-8WV5-X4W7-5GWW vulnerabilities
Vulnerabilities for packages: nri-cassandra-fips, nri-jmx, solr, grafana, plutono, grafana-fips, apm-server, commercial-grafana, temporal-server-fips, zipkin, seaweedfs-rocksdb-fips, minio, grafana-geomys-fips, agentbeat-fips, dapr-fips, datadog-agent, seaweedfs-rocksdb, amazon-cloudwatch-agent,...
CVE-2026-63379 affecting package mysql for versions less than 8.0.46-2
CVE-2026-63379 affecting package mysql for versions less than 8.0.46-2. A patched version of the package is available...
CVE-2026-63387 affecting package libevent for versions less than 2.1.13-1
CVE-2026-63387 affecting package libevent for versions less than 2.1.13-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-63383 affecting package libevent for versions less than 2.1.13-1
CVE-2026-63383 affecting package libevent for versions less than 2.1.13-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-63387 affecting package mysql for versions less than 8.0.46-2
CVE-2026-63387 affecting package mysql for versions less than 8.0.46-2. A patched version of the package is available...
CVE-2026-63385 affecting package mysql for versions less than 8.0.46-2
CVE-2026-63385 affecting package mysql for versions less than 8.0.46-2. A patched version of the package is available...
CVE-2026-63379 affecting package libevent for versions less than 2.1.13-1
CVE-2026-63379 affecting package libevent for versions less than 2.1.13-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-63382 affecting package libevent for versions less than 2.1.13-1
CVE-2026-63382 affecting package libevent for versions less than 2.1.13-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-63379 affecting package ntp for versions less than 4.2.8p17-3
CVE-2026-63379 affecting package ntp for versions less than 4.2.8p17-3. A patched version of the package is available...
CVE-2026-15806 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-67320 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, librechat, prism, opensearch-dashboards, nextcloud-server, wazuh-dashboard, kibana, semaphore, awx, gitlab-rails-ce-fips, opensearch-dashboards-fips, kubeflow-centraldashboard, wazuh-dashboard-fips, lerna, gitlab-rails-ce, langfuse, azurite,...
GHSA-9WX3-P993-35VP vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, librechat, prism, opensearch-dashboards, arangodb, nextcloud-server, wazuh-dashboard, kibana, semaphore, awx, gitlab-rails-ce-fips, opensearch-dashboards-fips, kubeflow-centraldashboard, wazuh-dashboard-fips, lerna, gitlab-rails-ce, langfuse, azurite,...
CVE-2026-67317 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, wazuh-dashboard-fips, lerna, nextcloud-server, wazuh-dashboard, gitlab-rails-ce, kibana, langfuse, librechat, awx, semaphore, opensearch-dashboards-fips, prism, langfuse-fips, opensearch-dashboards, gitlab-rails-ce-fips, kubeflow-centraldashboard,...
CVE-2026-18401 vulnerabilities
Vulnerabilities for packages: nextflow, management-api-for-apache-cassandra-5.0, tez, cass-config-builder, sonarqube, cassandra-reaper, jenkins-plugin-manager, apache-pulsar, opensearch, apache-tika, kafka, akhq, logstash, confluent-kafka, apache-nifi-registry, ruby3.3-jrjackson, gradle,...