18868 matches found
CVE-2025-47911 affecting package cni-plugins for versions less than 1.3.0-11
CVE-2025-47911 affecting package cni-plugins for versions less than 1.3.0-11. A patched version of the package is available...
CVE-2026-30863
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.10 and 9.5.0-alpha.11, the Google, Apple, and Facebook authentication adapters use JWT verification to validate identity tokens. When the adapter's audience configuration...
AZL-79652 CVE-2026-3713 affecting package tensorflow 2.16.1-11
A flaw has been found in pnggroup libpng up to 1.6.55. Affected by this vulnerability is the function dopnm2png of the file contrib/pngminus/pnm2png.c of the component pnm2png. This manipulation of the argument width/height causes heap-based buffer overflow. The attack is restricted to local...
Improper Verification of Cryptographic Signature
Overview parse-server is a version of the Parse backend that can be deployed to any infrastructure that can run Node.js. Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature in the authentication process when the audience configuration option is not...
AZL-79481 CVE-2026-3381 affecting package syslinux 6.04-11
Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib. Compress::Raw::Zlib includes a copy of the zlib library. Compress::Raw::Zlib version 2.220 includes zlib 1.3.2, which addresses findings fron the 7ASecurity audit of zlib. The includes fixs for...
CVE-2026-28194
In JetBrains TeamCity before 2025.11.3 open redirect was possible in the React project creation flow...
CVE-2026-21657
creationtimestamp| type| source ---|---|--- 2026-02-26 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-01 2026-02-27 13:23:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mftsmjduzd2x 2026-02-27 13:36:14+00:00| seen|...
Debian dla-4492 : gnutls-bin - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4492 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4492-1 [email protected]...
CVE-2025-11563
URLs containing percent-encoded slashes / or \ can trick wcurl into saving the output file outside of the current directory without the user explicitly asking for it. This flaw only affects the wcurl command line tool...
CVE-2026-23521
Versions of the Traccar open-source GPS tracking system up to and including 6.11.1 contain an issue in which authenticated users who can create or edit devices can set a device uniqueId to an absolute path. When uploading a device image, Traccar uses that uniqueId to build the filesystem path...
AZL-78314 CVE-2025-61145 affecting package libtiff for versions less than 4.6.0-11
libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c...
Debian: Security Advisory (DLA-4488-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-4486-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
AZL-78234 CVE-2026-2492 affecting package tensorflow for versions less than 2.16.1-11
TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of TensorFlow. An attacker must first obtain the ability to execute low-privileged code on the target syste...
CVE-2026-27574
creationtimestamp| type| source ---|---|--- 2026-02-19 15:15:03+00:00| published-proof-of-concept| https://github.com/OneUptime/oneuptime/security/advisories/GHSA-v264-xqh4-9xmm 2026-02-21 11:18:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfeitrcwjf2s 2026-02-23...
Debian: Security Advisory (DLA-4483-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Linux Distros Unpatched Vulnerability : CVE-2026-2574
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - glib-networking - None CVE-2026-2574 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C...
CVE-2026-1536 affecting package libsoup for versions less than 3.0.4-11
CVE-2026-1536 affecting package libsoup for versions less than 3.0.4-11. A patched version of the package is available...
Mozilla Thunderbird < 140.7.2
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 140.7.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2026-11 advisory. - Heap buffer overflow in libvpx. This vulnerability affects Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR...