CVE-2026-76889

UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76921

CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76927

H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76879

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-63335 vulnerabilities

Vulnerabilities for packages: conductor-fips, cassandra-reaper, nuxeo, thingsboard, zipkin, conductor, druid, logstash-fips, logstash...

[SECURITY] Fedora 43 Update: perl-List-SomeUtils-XS-0.59-1.fc43

List::SomeUtils provides some trivial but commonly needed functionality on lists which is not going to go into List::Util. XS implementation is faster than List::SomeUtils...

CVE-2026-53533

aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.1, SMTP.mail, SMTP.rcpt, SMTP.vrfy, and SMTP.expn send caller-supplied addresses without rejecting embedded CR or LF bytes. Data after the line break is framed as additional standalone SMTP command lines, allowing an...

CVE-2026-74989

Internally found bugs present in Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154 and Thunderbird 154...

CVE-2026-75838

DOMPurify before 3.4.13 contains a cross-site scripting vulnerability in INPLACE sanitization where element-removal hooks fail to neutralize detached subtrees. Attackers can supply HTML with event handlers on descendant elements that execute after sanitization completes, even though the returned...

SUSE CVE-2026-62900

unknown...

GO-2026-5247 vulnerabilities

Vulnerabilities for packages: vault-fips, splunk-otel-collector, splunk-otel-collector-fips, vault...

GO-2024-2697 vulnerabilities

Vulnerabilities for packages: grafana-fips...

GO-2026-5378 vulnerabilities

Vulnerabilities for packages: envoy-gateway, linkerd2, spegel, chaos-mesh, kubescape-server-fips, trivy-operator-fips, google-osconfig-agent, k8sgpt, datadog-agent, kubescape-operator, neuvector-scanner-fips, falco-no-driver, opa, cluster-api-helm-controller, neuvector, opa-envoy, zarf-fips,...

GO-2025-3409 vulnerabilities

Vulnerabilities for packages: zot...

GO-2025-3533 vulnerabilities

Vulnerabilities for packages: dataplaneapi, gptscript, timoni, nuclei...

.NET: .NET Information Disclosure Vulnerability

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...

.NET: .NET Elevation of Privilege Vulnerability

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

GHSA-Q7V3-32HW-67W6 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-70354

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...

firefox: thunderbird: Site isolation issue in the Graphics: WebRender component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Graphics: WebRender component...