374122 matches found
GO-2026-6612 vulnerabilities
Vulnerabilities for packages: prometheus-podman-exporter-fips, grafana-opentsdb-datasource, cass-operator-fips-no-pvc-delete, crossplane-provider-aws-networkfirewall, rke2-runtime-fips, ansible-operator-fips, grype-fips, newrelic-k8s-metrics-adapter-fips, crossplane-provider-aws-apigateway-fips,...
GO-2026-6617 vulnerabilities
Vulnerabilities for packages: prometheus-podman-exporter-fips, grafana-opentsdb-datasource, cass-operator-fips-no-pvc-delete, crossplane-provider-aws-networkfirewall, rke2-runtime-fips, ansible-operator-fips, grype-fips, newrelic-k8s-metrics-adapter-fips, crossplane-provider-aws-apigateway-fips,...
GO-2026-6611 vulnerabilities
Vulnerabilities for packages: prometheus-podman-exporter-fips, grafana-opentsdb-datasource, cass-operator-fips-no-pvc-delete, crossplane-provider-aws-networkfirewall, rke2-runtime-fips, ansible-operator-fips, grype-fips, newrelic-k8s-metrics-adapter-fips, crossplane-provider-aws-apigateway-fips,...
GO-2026-6603 vulnerabilities
Vulnerabilities for packages: prometheus-podman-exporter-fips, grafana-opentsdb-datasource, cass-operator-fips-no-pvc-delete, crossplane-provider-aws-networkfirewall, rke2-runtime-fips, ansible-operator-fips, grype-fips, newrelic-k8s-metrics-adapter-fips, crossplane-provider-aws-apigateway-fips,...
CVE-2026-78659 vulnerabilities
Vulnerabilities for packages: prometheus-podman-exporter-fips, grafana-opentsdb-datasource, cass-operator-fips-no-pvc-delete, crossplane-provider-aws-networkfirewall, rke2-runtime-fips, ansible-operator-fips, grype-fips, newrelic-k8s-metrics-adapter-fips, crossplane-provider-aws-apigateway-fips,...
CVE-2026-78669 vulnerabilities
Vulnerabilities for packages: prometheus-podman-exporter-fips, grafana-opentsdb-datasource, cass-operator-fips-no-pvc-delete, crossplane-provider-aws-networkfirewall, rke2-runtime-fips, ansible-operator-fips, grype-fips, newrelic-k8s-metrics-adapter-fips, crossplane-provider-aws-apigateway-fips,...
CVE-2026-39453 Red Lion Controls N-Tron 700 Series Reachable Assertion
Navigating to a certain URL on the switch’s web server causes the switch to reboot. This can be automated using a tool like curl to create DoS conditions where the switch constantly reboots...
EUVD-2026-95814
Navigating to a certain URL on the switch’s web server causes the switch to reboot. This can be automated using a tool like curl to create DoS conditions where the switch constantly reboots...
CVE-2026-39453
The Red Lion Controls N-Tron 700 Series switch is vulnerable to a Reachable Assertion (CWE-617) flaw. Navigating to a specific URL on the device's web server triggers an automatic reboot. An attacker can automate this action using tools like curl to create a persistent Denial of Service (DoS) con...
CVE-2026-104112
The illumos name service cache daemon (nscd ) is vulnerable to a kernel memory exhaustion flaw due to a missing release of file descriptors . Specifically, the switcher() procedure in usr/src/cmd/nscd/nscd_frontend.c fails to close descriptors passed via a door call that are not used by the reque...
CVE-2026-59797
A flaw was found in the modssl module of Apache HTTP Server. The SSLRequire directive does not properly restrict file-related expression functions in .htaccess files. An attacker who can write an .htaccess file in a directory where SSLRequire is permitted could use these functions to read files...
CVE-2026-92414
A flaw was found in jackrabbit-webdav. The WebDAV Web Distributed Authoring and Versioning server attaches a cached authenticated session when request header tokens—such as lock, transaction, or subscription identifiers—match, without verifying user credentials. An unauthenticated remote attacker...
Security Bulletin: Security vulnerability in IBM WebSphere Application Server Liberty affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak
Summary A security vulnerability in IBM WebSphere Application Server Liberty affects IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak. IBM WebSphere Application Server Liberty is used by IBM Robotic Process Automation and IBM Robotic Process Automation for Cloud Pak...
httpd bug fix and enhancement update
An update is available for httpd. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The httpd packages provide the Apache HTTP Server, a powerful, efficient, and...
RLSA-2026:77018 Important: python3.14 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
mod_auth_openidc security update
An update is available for modauthopenidc. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The modauthopenidc is an OpenID Connect authentication module for Apac...
RLSA-2026:79177 Important: mod_auth_openidc security update
The modauthopenidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fixes: modauthopenidc: modauthopenidc: Denial of Service via malformed state cookie parsi...
BIT-THRIFT-2026-92834 Apache Thrift: C++ WebSocket server transport does not read a full request length
Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...
BIT-PYTHON-MIN-2026-19445 Use-after-free of a server-side SSLContext when sni_callback switches contexts
A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its snicallback assigns a different context to SSLSocket.context the documented way to select a certificate per server name and nothing else keeps the original ssl.SSLContext alive. Typical cases are...