172927 matches found
GHSA-5V2H-R2CX-5XGJ vulnerabilities
Vulnerabilities for packages: arangodb...
GHSA-RRRM-QJM4-V8HF vulnerabilities
Vulnerabilities for packages: arangodb...
CVE-2022-21680 vulnerabilities
Vulnerabilities for packages: arangodb...
CVE-2022-21681 vulnerabilities
Vulnerabilities for packages: arangodb...
GHSA-QWWW-VCR4-C8H2 vulnerabilities
Vulnerabilities for packages: vitess...
thrift: Apache Thrift C++ bindings: Remote code execution via heap-based buffer overflow
A flaw was found in Apache Thrift C++ bindings. A remote, unauthenticated attacker can exploit a heap-based buffer overflow vulnerability without user interaction. This can lead to arbitrary code execution, allowing the attacker to gain full control over the affected system, compromise data, and...
thrift: Apache Thrift C++ bindings: Remote code execution via heap-based buffer overflow
A flaw was found in Apache Thrift C++ bindings. A remote, unauthenticated attacker can exploit a heap-based buffer overflow vulnerability without user interaction. This can lead to arbitrary code execution, allowing the attacker to gain full control over the affected system, compromise data, and...
CVE-2026-69152
The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand does not apply maxLength while constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memo...
CVE-2026-68945
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins repeated request parameters, allowing semantically distinct HttpClient requests to use the same...
CVE-2026-61372
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Jena Fuseki. This issue affects Apache Jena Fuseki: through 6.1.0. Users are recommended to upgrade to version 6.2.0, which fixes the issue...
io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records
A flaw was found in Netty's DnsResolveContext. An attacker controlling an authoritative name server for a subdomain can exploit this vulnerability by providing crafted NS records that are insufficiently validated. This allows the attacker to poison the DNS cache for parent domains, bypassing...
CVE-2026-18651
A flaw was found in 389 Directory Server. During SASL PLAIN authentication, the server installs connection-level bind credentials before performing the account-lock check. If the account is subsequently found to be locked, the bind is reported as failed to the client, but the already-installed...
p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing
A flaw was found in p11-kit. The RPC message attribute parsing functions p11rpcmessagegetattribute and p11rpcmessagegetattributearrayvalue form a mutually-recursive call chain with no recursion depth limit when processing nested CKAWRAPTEMPLATE, CKAUNWRAPTEMPLATE, and CKADERIVETEMPLATE attributes...
CVE-2026-47010 vulnerabilities
Vulnerabilities for packages: openjdk...
GHSA-QW6J-RCFR-8VRX vulnerabilities
Vulnerabilities for packages: openjdk...
GHSA-HHF8-3X8G-6PFF vulnerabilities
Vulnerabilities for packages: openjdk...
GHSA-FHJM-G79R-VV57 vulnerabilities
Vulnerabilities for packages: openjdk...
CVE-2026-46968 vulnerabilities
Vulnerabilities for packages: openjdk...