176823 matches found
CVE-2026-61475
VNC lossy refresh dirty bitmap OOB write at 2160p...
Linux Distros Unpatched Vulnerability : CVE-2026-13067
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When PROXY protocol v2 is used on the Unix domain socket path, roles derived from X.509 client certificates may not be validated against the configured...
CVE-2026-15705
usbredir: fix use-after-free on buffered bulk packet overflow...
ROS-20260727-73-0013
A vulnerability in apache-activemq related to a failure to implement measures to protect the structure of a web page. Exploitation of this vulnerability could allow a remote attacker to execute arbitrary code...
ROS-20260727-73-0028
A vulnerability in the modhttp2 module of the Apache HTTP Server is related to a use-after-free condition. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...
ROS-20260727-73-0029
A vulnerability in the Apache HTTP Server is related to a buffer overflow at the start of the buffer. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...
CVE-2026-58264
heap-based buffer overrun in command handler...
CVE-2026-61720
SF2 DMOD chunk integer underflow...
CVE-2026-61714
heap-based buffer overflow in MIDI player...
SUSE CVE-2026-11622
A DNSSEC validating resolver that is under a random subdomain attack against a DNSSEC-signed zone can suffer from runaway memory usage. The attacker needs to be able to send queries faster than the resolver can perform validation. The increased memory usage can be orders of magnitude beyond the...
nodejs: Node.js: Permission Model bypass via `process.report.writeReport()` path misvalidation
A flaw was found in Node.js. This vulnerability allows a bypass of the Permission Model enforcement due to path misvalidation within the process.report.writeReport function. An attacker could exploit this to bypass intended security boundaries, potentially leading to unauthorized access to...
nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module
A vulnerability in the NGINX ngxhttpslicemodule allows remote, unauthenticated attackers to access uninitialized memory via crafted requests. If configured with unnamed regex captures or background cache updates, this flaw can result in limited memory disclosure or a denial-of-service crash...
gitpython: GitPython: Command Injection via Git option prefix abbreviation
A flaw was found in GitPython. This vulnerability stems from an incomplete command injection blocklist that fails to account for Git's long-option prefix abbreviation feature. An attacker can bypass existing security measures by using abbreviated option names, which Git then resolves to dangerous...
[SECURITY] Fedora 43 Update: google-osconfig-agent-20260717.00-1.fc43
Google OS Config Agent...
gitpython: GitPython: Command Injection via Git option prefix abbreviation
A flaw was found in GitPython. This vulnerability stems from an incomplete command injection blocklist that fails to account for Git's long-option prefix abbreviation feature. An attacker can bypass existing security measures by using abbreviated option names, which Git then resolves to dangerous...
gitpython: GitPython: Remote Code Execution via Newline Injection in config_writer()
A flaw was found in GitPython. This vulnerability allows attackers to inject newline characters into the section parameter of the configwriter function, leading to the injection of arbitrary section headers into the .git/config file. By forging a core section with a malicious hooksPath, an attack...
sqlite: sqlite: Arbitrary code execution via use-after-free in JSON parsing
A flaw was found in sqlite. This use-after-free vulnerability in the JSON parsing logic allows remote attackers to craft malicious JSON payloads. This can trigger memory deallocation followed by illegal memory access, potentially leading to arbitrary code execution, sensitive information leakage,...
sqlite: sqlite: Arbitrary code execution via malicious SQL statement
A flaw was found in sqlite. A remote attacker can exploit a use-after-free vulnerability in the ORDER BY clause parsing routine by crafting a malicious SQL statement. This can lead to an application crash, sensitive information disclosure, and in some cases, arbitrary code execution, allowing the...
GHSA-MH99-V99M-4GVG vulnerabilities
Vulnerabilities for packages: ts-patch, pulumi, sqlpad, opensearch-dashboards-fips, thingsboard, unleash-proxy, actions-runner, gemini-cli, rancher-api-ui, opensearch-dashboards, nextcloud-server, renovate, vitess, authentik, lerna, unleash-fips, saf, gitlab-rails-ce-fips, authentik-fips,...
CVE-2026-14257 vulnerabilities
Vulnerabilities for packages: ts-patch, pulumi, sqlpad, opensearch-dashboards-fips, thingsboard, unleash-proxy, actions-runner, gemini-cli, rancher-api-ui, opensearch-dashboards, nextcloud-server, renovate, vitess, authentik, lerna, unleash-fips, saf, gitlab-rails-ce-fips, authentik-fips,...