178116 matches found
CVE-2026-72522
libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the toUtf16 functions...
postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation
A flaw was found in PostgreSQL. Uncontrolled recursion during SSL Secure Sockets Layer and GSS Generic Security Service negotiation allows an attacker to achieve a sustained denial of service. This can be exploited by an attacker with access to a PostgreSQL AFUNIX socket. If SSL and GSS are both...
brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity
A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the expand function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-lo...
CVE-2026-16742
systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user...
ROS-20260810-73-0029
The vulnerability in libssh2 is related to integer overflow. Exploitation of this vulnerability can be carried out remotely...
ROS-20260810-73-0034
The vulnerability of the publickeyresponsesuccess function in the libssh2 library is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures or execute arbitrary code...
Critical Photon OS Security Update - PHSA-2026-5.0-90-0951
Updates of 'curl' packages of Photon OS have been released...
libarchive security update
3.7.7-10 - Related: CVE-2026-14164 3.7.7-9 - Resolves: CVE-2026-14164...
libarchive security update
3.5.3-11 - Related: CVE-2026-14164 3.5.3-10 - Resolves: CVE-2026-14164...
CVE-2026-15060
When systemd-machined = v259 or v258 with a custom polkit policy that allows register-machine access is running on a desktop system, an unprivileged user logged in a desktop graphical session can kill arbitrary processes, even privileged ones. - versions older than v259 are not affected, unless...
Linux Distros Unpatched Vulnerability : CVE-2026-19404
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in 389 Directory Server. The CleanAllRUV and Abort CleanAllRUV replication-maintenance extended operations perform no authorization check,...
Important Photon OS Security Update - PHSA-2026-5.0-92-0950
Updates of 'vim' packages of Photon OS have been released...
ROS-20260810-73-0032
The vulnerability in libssh2 is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260810-73-0004
The vulnerability of the JAXP component in the Oracle Java SE software platform and the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to...
CVE-2026-15059
Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation...
Linux Distros Unpatched Vulnerability : CVE-2026-59090
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow in the blockrem variable, occurs when a user opens a...
Important: postgresql:12 security update
PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation CVE-2026-6479 For more details about the security issues, including the impact, a CVSS score, acknowledgments, a...
ruby:3.3 security, bug fix, and enhancement update
ruby 3.3.12-8 - Upgrade to Ruby 3.3.12. Resolves: RHEL-170929 Resolves: RHEL-193664 rubygem-abrt rubygem-mysql2 rubygem-pg...
