23349 matches found
UBUNTU-CVE-2026-34734
HDF5 is software for managing data. In 1.14.1-2 and earlier, a heap-use-after-free was found in the h5dump helper utility. An attacker who can supply a malicious h5 file can trigger a heap use-after-free. The freed object is referenced in a memmove call from H5Tconvstruct. The original object was...
CVE-2026-34734
HDF5 is software for managing data. In 1.14.1-2 and earlier, a heap-use-after-free was found in the h5dump helper utility. An attacker who can supply a malicious h5 file can trigger a heap use-after-free. The freed object is referenced in a memmove call from H5Tconvstruct. The original object was...
EUVD-2026-21020
HDF5 is software for managing data. In 1.14.1-2 and earlier, a heap-use-after-free was found in the h5dump helper utility. An attacker who can supply a malicious h5 file can trigger a heap use-after-free. The freed object is referenced in a memmove call from H5Tconvstruct. The original object was...
PT-2026-31703
HDF5 is software for managing data. In 1.14.1-2 and earlier, a heap-use-after-free was found in the h5dump helper utility. An attacker who can supply a malicious h5 file can trigger a heap use-after-free. The freed object is referenced in a memmove call from H5T conv struct. The original object w...
HDF5 资源管理错误漏洞
HDF5 is a library developed by the HDF open-source project. Versions of HDF5 such as 1.14.1-2 and earlier contained a resource management vulnerability. This vulnerability stemmed from the use of the h5dump auxiliary tool, where heap reclamation followed by reuse occurred. Providing a malicious h...
PT-2026-31612
Name of the Vulnerable Software and Affected Versions go-getter versions up to 1.8.5 Description The go-getter library may allow arbitrary file reads on the file system during certain git operations through a maliciously crafted URL. Recommendations Update to go-getter version 1.8.6 or later...
Security update for ignition
This update for ignition fixes the following issue: CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2: path pseudo- header bsc1260251 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...
CVE-2026-24049 affecting package python-virtualenv for versions less than 20.36.1-2
CVE-2026-24049 affecting package python-virtualenv for versions less than 20.36.1-2. A patched version of the package is available...
CVE-2025-0838 affecting package mysql for versions less than 8.0.45-2
CVE-2025-0838 affecting package mysql for versions less than 8.0.45-2. A patched version of the package is available...
CVE-2025-2915 affecting package hdf5 for versions less than 1.14.6-2
CVE-2025-2915 affecting package hdf5 for versions less than 1.14.6-2. A patched version of the package is available...
CVE-2026-30922 affecting package python-pyasn1 for versions less than 0.4.8-2
CVE-2026-30922 affecting package python-pyasn1 for versions less than 0.4.8-2. A patched version of the package is available...
CVE-2025-50181 affecting package python-virtualenv for versions less than 20.36.1-2
CVE-2025-50181 affecting package python-virtualenv for versions less than 20.36.1-2. A patched version of the package is available...
CVE-2026-1703 affecting package python-virtualenv for versions less than 20.36.1-2
CVE-2026-1703 affecting package python-virtualenv for versions less than 20.36.1-2. A patched version of the package is available...
SUSE CVE-2026-26233
Mattermost versions 11.4.x = 11.4.0, 11.3.x = 11.3.1, 11.2.x = 11.2.3, 10.11.x = 10.11.11 fail to rate limit login requests which allows unauthenticated remote attackers to cause denial of service server crash and restart via HTTP/2 single packet attack with 100+ parallel login requests...
Ubuntu: Security Advisory (USN-8143-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Magento 2 Development MCP Server 操作系统命令注入漏洞
Magento 2 Development MCP Server is an open-source AI assistant integrated tool developed by elgentos commerce & configurators for Magento 2. Versions of Magento 2 Development MCP Server prior to 1.0.2 contained a vulnerability related to operating system command injection. This vulnerability...
Debian dla-4522 : libxml-parser-perl - security update
The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4522 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4522-1 [email protected]...
PT-2026-30513
Name of the Vulnerable Software and Affected Versions elgentos magento2-dev-mcp versions up to 1.0.2 Description A flaw exists in elgentos magento2-dev-mcp up to version 1.0.2 due to a command injection issue within the executeMagerun2Command function located in the src/index.ts file. This...
CVE-2025-43193
creationtimestamp| type| source ---|---|--- 2026-04-02 22:18:09+00:00| seen| Telegram/Xo8rcU-avFPltDp1GTd2dLaGLg60r5i2jXiWyq6xqnXxSs 2026-04-02 22:18:34+00:00| seen| Telegram/ofzxZdYhE5nMpuM1P1zGrKT9SL3EwVBffeTg8dXaW1MKkb4...