169332 matches found
CVE-2026-10822
If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit. BIND will first need to store a DNS record for a key KEY, DNSKEY, etc.. That key must specify a PRIVATEDNS algorithm 253, and in the algorithm identifier,...
USN-8587-1: HTML-Parser vulnerability
It was discovered that HTML-Parser incorrectly handled entity references when the input string was identical to an entity value in the lookup table. An attacker could possibly use this issue to obtain sensitive information...
CVE-2026-55990
In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when the 'dnscrypt:' clause lists more 'dnscrypt-provider-cert:' files than there are matching 'dnscrypt-secret-key:' files, Unbound fills only the matched prefix and leaves the tail slots at the '0xdb' fill that libsodium's allocator writes...
CVE-2026-55717
In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, when 'serve-expired: yes' is set together with a 'response-ip: redirect' /'response-ip-data: CNAME ' rule or the RPZ 'rpz-cname-override' equivalent, a remote client who controls any delegated domain can crash the daemon. The...
CVE-2026-55708
In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'viewlocaldata' and 'viewlocaldatas' commands of 'unbound-control' create a bare local zones tree for an already configured named view when the view is configured with no local data to begin with. However, the creation through the contro...
CVE-2026-50243
In NLnet Labs Unbound 1.6.2 up to and including 1.25.1, when Unbound is configured with the 'respip' module in front of the validator together with a 'response-ip' redirect rule or an RPZ file with an RPZ-IP trigger, the rewriting handler does not check the security status of the upstream answer...
CVE-2026-44690
In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Labels field combined with premature cache writes during RFC 8198 aggressive NSEC processing leads to cache poisoning that permits a malicious actor controlling a single delegated zone to poison arbitrary...
USN-8583-1: GIFLIB vulnerabilities
It was discovered that GIFLIB incorrectly handled certain GIF image files. If a user or automated system were tricked into opening a specially crafted GIF file, a remote attacker could use this issue to cause GIFLIB to crash, resulting in a denial of service, or possibly execute arbitrary code...
libreoffice: LibreOffice Calc: Arbitrary code execution via heap buffer overflow in formula compilation
A vulnerability has been identified in LibreOffice Calc. An application crash may occur if a user opens a malicious spreadsheet that contains excessively long formulas. Successful exploitation of this vulnerability could result in a denial of service or potentially lead to arbitrary code executio...
jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass
A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator PTV when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic typ...
GHSA-8V84-F9PQ-WR9X vulnerabilities
Vulnerabilities for packages: tensorflow-gpu-jupyter, openstack-horizon-2025.2-fips, openstack-horizon-2025.2, open-webui...
GHSA-6R8X-57C9-28J4 vulnerabilities
Vulnerabilities for packages: tensorflow-gpu-jupyter, openstack-horizon-2025.2-fips, openstack-horizon-2025.2, open-webui...
GHSA-4X4J-2G7C-83W6 vulnerabilities
Vulnerabilities for packages: tensorflow-gpu-jupyter, openstack-horizon-2025.2-fips, openstack-horizon-2025.2, open-webui...
CVE-2026-54058 vulnerabilities
Vulnerabilities for packages: tensorflow-gpu-jupyter, openstack-horizon-2025.2-fips, openstack-horizon-2025.2, open-webui...
CVE-2026-55380 vulnerabilities
Vulnerabilities for packages: tensorflow-gpu-jupyter, openstack-horizon-2025.2-fips, openstack-horizon-2025.2, open-webui...
GHSA-FJ7V-R99M-22GQ vulnerabilities
Vulnerabilities for packages: tensorflow-gpu-jupyter, openstack-horizon-2025.2-fips, openstack-horizon-2025.2, open-webui...
CVE-2026-59198 vulnerabilities
Vulnerabilities for packages: tensorflow-gpu-jupyter, openstack-horizon-2025.2-fips, openstack-horizon-2025.2, open-webui...
CVE-2026-59200 vulnerabilities
Vulnerabilities for packages: tensorflow-gpu-jupyter, openstack-horizon-2025.2-fips, openstack-horizon-2025.2, open-webui...