201008 matches found
vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion
A flaw was found in Vim, an open-source command-line text editor. An attacker could craft a malicious tags file that, when processed by Vim's C omni-completion feature, leads to insufficient escaping of input. This vulnerability allows for the execution of arbitrary Ex commands and, subsequently,...
CVE-2026-107159
MiniUPnPd through 2.3.11 built with --strict contains a divide-by-zero vulnerability in ProcessSSDPData that allows unauthenticated local network attackers to crash the daemon. Attackers can send a single multicast M-SEARCH datagram with MX: 0 and a known ST to port 1900, triggering SIGFPE and...
rust-rpm-sequoia security, bug fix, and enhancement update
An update is available for rust-rpm-sequoia. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list An implementation of the RPM PGP interface using Sequoia. Security...
rust-sequoia-sqv security update
An update is available for rust-sequoia-sqv. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A simple OpenPGP signature verification program. Security Fixes:...
CVE-2026-107159
MiniUPnPd through 2.3.11 built with --strict contains a divide-by-zero vulnerability in ProcessSSDPData that allows unauthenticated local network attackers to crash the daemon. Attackers can send a single multicast M-SEARCH datagram with MX: 0 and a known ST to port 1900, triggering SIGFPE and...
[SECURITY] [DLA 4826-1] puma security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4826-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA October 07, 2026 https://wiki.debian.org/LTS -...
sequoia-openpgp: sequoia-openpgp: Cryptographic integrity compromise via key flag confusion
A flaw was found in sequoia-openpgp. The library incorrectly infers key flags for older certificates when a key flags subpacket is missing, leading to a discrepancy in how key capabilities are viewed. This key flag confusion allows an attacker to bypass the back-signature check. Consequently, an...
cjose: cjose: Heap buffer overflow in AES Key Wrap decryption leads to denial of service
A flaw was found in cjose, a C library for Javascript Object Signing and Encryption JOSE. A remote, unauthenticated attacker can exploit a heap buffer overflow vulnerability in the AES Key Wrap decryption process. By submitting a crafted Javascript Web Encryption JWE to an application, the attack...
cjose: cjose: Heap buffer overflow in AES Key Wrap decryption leads to denial of service
A flaw was found in cjose, a C library for Javascript Object Signing and Encryption JOSE. A remote, unauthenticated attacker can exploit a heap buffer overflow vulnerability in the AES Key Wrap decryption process. By submitting a crafted Javascript Web Encryption JWE to an application, the attack...
cjose: cjose: Heap buffer overflow in AES Key Wrap decryption leads to denial of service
A flaw was found in cjose, a C library for Javascript Object Signing and Encryption JOSE. A remote, unauthenticated attacker can exploit a heap buffer overflow vulnerability in the AES Key Wrap decryption process. By submitting a crafted Javascript Web Encryption JWE to an application, the attack...
GHSA-R4XH-JQRQ-34V2 vulnerabilities
Vulnerabilities for packages: renovate, wazuh-dashboard-fips, lerna, langfuse, prism, langfuse-fips...
CVE-2026-86597 vulnerabilities
Vulnerabilities for packages: google-cloud-otel-ops-collector, nrdot-collector...
GHSA-5CWM-P7PJ-GQP2 vulnerabilities
Vulnerabilities for packages: google-cloud-otel-ops-collector, nrdot-collector...
GHSA-QQJ6-54Q6-CXV6 vulnerabilities
Vulnerabilities for packages: google-cloud-otel-ops-collector, nrdot-collector...
GHSA-27VJ-QCQG-25RC vulnerabilities
Vulnerabilities for packages: mlrun, nemo, airflow-core, nemo-rl-cuda-13.0, nemo-gym, open-webui, kserve-huggingfaceserver-cuda-13.3, kserve, mlrun-fips...
CVE-2026-104851 vulnerabilities
Vulnerabilities for packages: mlrun, nemo, airflow-core, nemo-rl-cuda-13.0, nemo-gym, open-webui, kserve-huggingfaceserver-cuda-13.3, kserve, mlrun-fips...
GHSA-R4XH-JQRQ-34V2 vulnerabilities
Vulnerabilities for packages: renovate, prism, lerna...
gnupg2: gnupg: Arbitrary file overwrite via symlink traversal in gpgtar
A flaw was found in the gpgtar utility in GnuPG. When extracting an archive into a directory containing pre-existing symbolic links symlinks, the tool can follow those links instead of staying within the target directory. An attacker can provide a crafted archive that, when extracted by an...
kernel: RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads
A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access subsystem, specifically within the rxe driver. A remote attacker could exploit this vulnerability by sending a specially crafted ATOMICWRITE request with a zero-byte payload. This improper handling of non-8-byte ATOMICWRITE...
rust-rpm-sequoia security update
An update is available for rust-rpm-sequoia. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list An implementation of the RPM PGP interface using Sequoia. Security...