170701 matches found
CVE-2026-17501
A flaw has been found in ggml-org llama.cpp e15efe0. This vulnerability affects the function transform of the file common/json-schema-to-grammar.cpp of the component JSON-Schema-to-GBNF Conversion. This manipulation causes uncontrolled recursion. The attack may be initiated remotely. The pull...
go-fdo-server security update
1.0.1-3 - Rebuild against updated golang...
ROS-20260727-73-0012
A vulnerability in the message broker administration console of the Apache ActiveMQ software platform is related to flaws in the code generation control mechanism. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...
ROS-20260727-73-0029
A vulnerability in the Apache HTTP Server is related to a buffer overflow at the start of the buffer. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...
ROS-20260727-73-0013
A vulnerability in apache-activemq related to a failure to implement measures to protect the structure of a web page. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...
SUSE CVE-2026-11622
A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the...
nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module
A vulnerability in the NGINX ngxhttpslicemodule allows remote, unauthenticated attackers to access uninitialized memory via crafted requests. If configured with unnamed regex captures or background cache updates, this flaw can result in limited memory disclosure or a denial-of-service crash...
sqlite: sqlite: Arbitrary code execution via use-after-free in JSON parsing
A flaw was found in sqlite. This use-after-free vulnerability in the JSON parsing logic allows remote attackers to craft malicious JSON payloads. This can trigger memory deallocation followed by illegal memory access, potentially leading to arbitrary code execution, sensitive information leakage,...
sqlite: sqlite: Arbitrary code execution via malicious SQL statement
A flaw was found in sqlite. A remote attacker can exploit a use-after-free vulnerability in the ORDER BY clause parsing routine by crafting a malicious SQL statement. This can lead to an application crash, sensitive information disclosure, and in some cases, arbitrary code execution, allowing the...
GHSA-MH99-V99M-4GVG vulnerabilities
Vulnerabilities for packages: thingsboard-fips, vitess, unleash, lerna, arangodb, ts-patch, pulumi, opensearch-dashboards, kibana, authentik, sqlpad, actions-runner, unleash-fips, langfuse, nextcloud-server, opensearch-dashboards-fips, langfuse-fips, thingsboard, gemini-cli, rancher-api-ui, npm,...
CVE-2026-14257 vulnerabilities
Vulnerabilities for packages: thingsboard-fips, vitess, unleash, lerna, arangodb, ts-patch, pulumi, opensearch-dashboards, kibana, authentik, sqlpad, actions-runner, unleash-fips, langfuse, nextcloud-server, opensearch-dashboards-fips, langfuse-fips, thingsboard, gemini-cli, rancher-api-ui, npm,...
GHSA-V74W-7MR3-4QG3 vulnerabilities
Vulnerabilities for packages: apache-hop, seata, tez, thingsboard, apache-hop-fips, management-api-for-apache-cassandra-5.0...
GHSA-FJR4-X663-MWXC vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips, awx, mlflow-fips, opal, mlflow...
GHSA-6P8H-3WGX-97GF vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips, awx, mlflow-fips, opal, mlflow...
GHSA-3RP5-JJMW-4WV2 vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips, awx, mlflow-fips, opal, mlflow...
GHSA-94P4-4CQ8-9G67 vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips, awx, mlflow-fips, opal, mlflow...
GHSA-R9MR-M37C-5FR3 vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips, awx, mlflow-fips, opal, mlflow...
GHSA-G35J-M5XG-VH3Q vulnerabilities
Vulnerabilities for packages: k3s, kubo, rke2-runtime, rke2-runtime-fips, spegel, ipfs-cluster-fips, spegel-fips, ipfs-cluster...
CVE-2026-57497 vulnerabilities
Vulnerabilities for packages: k3s, kubo, rke2-runtime, rke2-runtime-fips, spegel, ipfs-cluster-fips, spegel-fips, ipfs-cluster...
GHSA-R292-9MHP-454M vulnerabilities
Vulnerabilities for packages: node-gyp, code-server, haraka, opensearch-dashboards-fips, renovate, lerna, opensearch-dashboards, gemini-cli, kibana, kubeflow-centraldashboard, npm, pulumi, sqlpad, graalvm, actions-runner...