202210 matches found
SUSE CVE-2026-107386
amqp091-go is a Go AMQP 0.9.1 client. From 1.13.0 until 1.14.0, the frame-size mitigation from the prior allocation advisory can be bypassed before connection.tune completes because Connection.maxFrameSize uses zero for both the not-yet-negotiated and negotiated-unlimited states. A malicious or...
SUSE CVE-2026-107708
MIT krb5 through 1.22.2 contains a NULL pointer dereference vulnerability in the KDC's getpacprincwithrealm that returns success while leaving the client principal NULL on malformed names. A malicious or compromised cross-realm trusted KDC can send an S4U2Proxy request with a PAC carrying a...
SUSE CVE-2026-107888
OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs when a job marked job-held-on-create refers to a temporary printer that has been automatically deleted. Temporary-printer cleanup can remove the destination without canceling its held jobs, and the scheduler...
SUSE CVE-2026-107935
A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system...
CVE-2026-95702
Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code execution in the host sentry process by double-freeing the backing MemoryFile from an in-sandbox overlay filesystem. The...
CVE-2026-108104
Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled buffers twice when replacement allocation fails. Attackers can supply framed data with a large declared chunk length to trigger OutOfMemoryError, causing shared...
httpd: Fix of CVE-2026-56154
CVE-2026-56154: modrewrite: use-after-free of the Vary header name collected during an LA-U/LA-F lookahead of an HTTP header; copy it into the main request pool before destroying the sub-request...
GHSA-W6R9-248C-FRG8 vulnerabilities
Vulnerabilities for packages: bento-fips, trufflehog, bento, krakend, trufflehog-fips, keda, keda-fips, dapr, argo-events-fips, dapr-fips, krakend-fips, telegraf, falcosidekick, falcosidekick-fips, guac, argo-events...
CVE-2026-107386 vulnerabilities
Vulnerabilities for packages: bento-fips, trufflehog, bento, krakend, trufflehog-fips, keda, keda-fips, dapr, argo-events-fips, dapr-fips, krakend-fips, telegraf, falcosidekick, falcosidekick-fips, guac, argo-events...
CVE-2025-23207 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips...
GHSA-7PQW-9J4J-H8Q3 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips...
GHSA-G84C-RXFJ-3J2C vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips...
GHSA-4W3W-2RP5-G8JM vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips...
CVE-2026-83607 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips...
GHSA-W2RR-34G9-RVRJ vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips...
CVE-2026-19693 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips...
CVE-2026-76844 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips...
GHSA-CG87-WMX4-V546 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips...