5641 matches found
GHSA-C69G-56F8-XWQJ vulnerabilities
Vulnerabilities for packages: commercial-elasticsearch, spark-fips, keycloak-fips, wavefront-proxy, elasticsearch, kayenta-fips, hono, apache-hop, traccar, apache-pulsar-fips, kafka-bridge-fips, kserve-modelmesh, zipkin, flyway-fips, localstack, apache-camel-karavan-devmode, grpc-java-fips,...
CVE-2026-63317
Arbitrary Class Instantiation via XML Feature Generator Descriptor and Format Name in Apache OpenNLP Versions Affected: - before 2.5.10 - before 3.0.0-M5 Description: Three code paths in Apache OpenNLP load a class by its fully-qualified name via Class.forName and invoke its no-arg constructor...
CVE-2026-54133 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2026-64649 vulnerabilities
Vulnerabilities for packages: langfuse-fips, keep-fips, keep, jitsucom-jitsu, homepage, peerdb-ui, langfuse...
ROS-20260724-73-0018
The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...
CVE-2026-44690 affecting package unbound for versions less than 1.25.2-1
CVE-2026-44690 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-42955 affecting package unbound for versions less than 1.25.2-1
CVE-2026-42955 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-56444 affecting package unbound for versions less than 1.25.2-1
CVE-2026-56444 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-56416 affecting package unbound for versions less than 1.25.2-1
CVE-2026-56416 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-44687 affecting package unbound for versions less than 1.25.2-1
CVE-2026-44687 affecting package unbound for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-65705
FFmpeg versions 3.4 through 8.1.2 contain an out-of-bounds write vulnerability in the vffloodfill video filter that allows attackers to corrupt heap memory by supplying a dynamically sized video stream with filtergraph reinitialization disabled via -reinitfilter 0. When configinput allocates the...
USN-8600-1: libXpm vulnerability
Naoki Wakamatsu discovered that libXpm did not properly validate file boundaries when processing XPM image files. An attacker could possibly use this issue to cause libXpm to crash, resulting in a denial of service...
GHSA-XVCM-6775-5M9R vulnerabilities
Vulnerabilities for packages: vitess, nextcloud-server, rancher-api-ui, argo-workflows...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform out-of-bounds memory access via a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted inputs in the WebUI of Google Chrome before version 150.0.7871.47 allowed a remote attacker to leak cross-origin data through malicious network traffic. Chromium security severity: Medium...
GHSA-8WHX-365G-H9VV vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, ruby4.0-rails, pghero, ruby3.4-rails, gitlab-rails-ce-fips, ruby3.3-rails, pghero-fips, ruby3.2-rails...
GHSA-9WJQ-CP2P-HRGF vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, ruby4.0-rails, pghero, ruby3.4-rails, gitlab-rails-ce-fips, ruby3.3-rails, pghero-fips, ruby3.2-rails...
GHSA-XVCM-6775-5M9R vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, keep-fips, keep, nextcloud-server, authentik, authentik-fips, argo-workflows, rancher-api-ui, vitess, gitlab-rails-ce-fips, arangodb...
GHSA-HM4W-WWCW-MR6R vulnerabilities
Vulnerabilities for packages: py3-cassandra-medusa, superset, superset-fips, kubeflow-jupyter-web-app, litellm, gitlab-cng, mlflow, datahub-ingestion-fips, mitmproxy, kubeflow, lmcache-cuda-12.8, airflow, dbt-bigquery, kubeflow-pipelines, authentik, localstack, metaflow-service-fips,...