44976 matches found
[SECURITY] Fedora 43 Update: gitleaks-8.30.0-1.fc43
Scan git repos or files for secrets using regex and entropy...
DSA-6093-1 gimp - security update
Bulletin has no description...
CVE-2025-54166
An out-of-bounds read vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data. We have already fixed the vulnerability in the following versions: QTS...
MAL-2026-11 Malicious code in cc-double-1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70cef7c9872833a60083bf6c209e3c0820db61d4350689db8b2480b58026874 The package cc-double-1 was found to contain malicious code...
Malicious code in cc-double-1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f70cef7c9872833a60083bf6c209e3c0820db61d4350689db8b2480b58026874 The package cc-double-1 was found to contain malicious code...
GCVE-1-2026-0002
creationtimestamp| type| source ---|---|--- 2026-01-02 20:06:08+00:00| seen| https://infosec.exchange/users/adulau/statuses/115827301939252661...
GCVE-1-2026-0001
creationtimestamp| type| source ---|---|--- 2026-01-02 10:21:44+00:00| seen| https://vulnerability.circl.lu/bundle/2f22146f-462c-4841-9bff-17d8f791e1c2...
DLA-4431-1 gimp - security update
Bulletin has no description...
[SECURITY] Fedora 43 Update: delve-1.26.0-1.fc43
Delve is a debugger for the Go programming language. The goal of the project is to provide a simple, full featured debugging tool for Go. Delve should be easy to invoke and easy to use. Chances are if you're using a debugger, things aren't going your way. With that in mind, Delve should stay out ...
PT-2026-21390
Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description GIMP installations are susceptible to remote code execution due to a heap-based buffer overflow present in the HDR file parsing functionality. Exploitation requires user interaction with malicio...
PT-2026-21391
Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A heap-based buffer overflow exists during the parsing of HDR files. This occurs because the software fails to properly validate the length of user-supplied data before copying it to a heap-base...
PT-2026-28317
Name of the Vulnerable Software and Affected Versions Node.js versions 20.x through 25.x Description A flaw exists in Node.js HMAC verification where a non-constant-time comparison is used when validating signatures provided by a user. This could potentially leak timing information proportional t...
PT-2026-28318
Name of the Vulnerable Software and Affected Versions Node.js versions 20 through 25 Description A memory leak can occur in Node.js HTTP/2 servers when a client sends WINDOW UPDATE frames on stream 0 connection-level that cause the flow control window to exceed the maximum value of 2³¹-1. The...
DLA-4430-1 net-snmp - security update
Bulletin has no description...
CVE-2025-14180 affecting package php for versions less than 8.1.34-1
CVE-2025-14180 affecting package php for versions less than 8.1.34-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-68615 affecting package net-snmp for versions less than 5.9.5.2-1
CVE-2025-68615 affecting package net-snmp for versions less than 5.9.5.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-14177 affecting package php for versions less than 8.1.34-1
CVE-2025-14177 affecting package php for versions less than 8.1.34-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-14178 affecting package php for versions less than 8.1.34-1
CVE-2025-14178 affecting package php for versions less than 8.1.34-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-13699 affecting package mariadb for versions less than 10.6.24-1
CVE-2025-13699 affecting package mariadb for versions less than 10.6.24-1. An upgraded version of the package is available that resolves this issue...