23660 matches found
Important: Red Hat Security Advisory: Red Hat Ceph Storage
A new version of Red Hat build of Ceph Storage has been released The Red Hat Storage Ceph container images are based on the latest ubi9 base image and Ceph 7.1. This release updates to the latest version...
SUSE-SU-2026:20446-1 Security update for glib2
This update for glib2 fixes the following issues: - CVE-2026-1485: Fixed buffer underflow and out-of-bounds access due to integer wraparound in content type parsing bsc1257354. - CVE-2026-1484: Fixed buffer underflow and out-of-bounds access due to miscalculated buffer boundaries in the Base64...
Important: Red Hat Security Advisory: Red Hat Ceph Storage
A new version of Red Hat build of Ceph Storage has been released The Red Hat Storage Ceph container images are based on the latest ubi9 base image and Ceph 8.1. This release updates to the latest version...
kernel: smc: Fix use-after-free in __pnet_find_base_ndev()
In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in pnetfindbasendev. syzbot reported use-after-free of netdevice in pnetfindbasendev, which was called during connect. 0 smcpnetfindismresource fetches skdstgetsk-dev and passes down to pnetfindbasendev,...
kernel: smc: Fix use-after-free in __pnet_find_base_ndev()
In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in pnetfindbasendev. syzbot reported use-after-free of netdevice in pnetfindbasendev, which was called during connect. 0 smcpnetfindismresource fetches skdstgetsk-dev and passes down to pnetfindbasendev,...
Google Links China, Iran, Russia, North Korea to Coordinated Defense Sector Cyber Operations
Several state-sponsored actors, hacktivist entities, and criminal groups from China, Iran, North Korea, and Russia have trained their sights on the defense industrial base DIB sector, according to findings from Google Threat Intelligence Group GTIG. The tech giant's threat intelligence division...
Intel oneAPI Base Toolkit < 2024.1.0 Multiple Vulnerabilities
Multiple vulnerabilities exist in Intel oneAPI Base Toolkit versions prior to 2024.1.0. See vendor advisory for more details. - Incorrect default permissions for some Intel® oneAPI Toolkit and component software installers may allow an authenticated user to potentially enable escalation of...
CVE-2019-25340
SpotAuditor 5.3.2 contains a denial of service vulnerability in its Base64 decryption feature that allows attackers to crash the application by supplying an oversized buffer. Attackers can generate a malformed input file with 2000 repeated characters to trigger an application crash when pasted in...
CVE-2019-25340 SpotAuditor 5.3.2 - 'Base64' Denial Of Service
SpotAuditor 5.3.2 contains a denial of service vulnerability in its Base64 decryption feature that allows attackers to crash the application by supplying an oversized buffer. Attackers can generate a malformed input file with 2000 repeated characters to trigger an application crash when pasted in...
CVE-2025-41117
A cross site scripting flaw has been discovered in Grafana's Explore Traces view. This view can be rendered as raw HTML and thus inject malicious JavaScript in the browser. This would require malicious JavaScript to be entered into the stack trace field. Only datasources with the Jaeger HTTP API...
CVE-2026-26007 vulnerabilities
Vulnerabilities for packages: kubeflow-jupyter-web-app, kubeflow-volumes-web-app, semgrep, ggshield, open-webui, k8s-sidecar, superset, in-toto, dask-kubernetes, kserve, mlflow, py3-cassandra-medusa, kubeflow-pipelines, jupyter-base-notebook, kubeflow-pipelines-visualization-server, airflow,...
GHSA-R6PH-V2QM-Q3C2 vulnerabilities
Vulnerabilities for packages: kubeflow-jupyter-web-app, kubeflow-volumes-web-app, semgrep, ggshield, open-webui, k8s-sidecar, superset, in-toto, dask-kubernetes, kserve, mlflow, py3-cassandra-medusa, kubeflow-pipelines, jupyter-base-notebook, kubeflow-pipelines-visualization-server, airflow,...
PT-2026-7939
SpotAuditor 5.3.2 contains a denial of service vulnerability in its Base64 decryption feature that allows attackers to crash the application by supplying an oversized buffer. Attackers can generate a malformed input file with 2000 repeated characters to trigger an application crash when pasted in...
CVE-2026-26019
LangChain is a framework for building LLM-powered applications. Prior to 1.1.14, the RecursiveUrlLoader class in @langchain/community is a web crawler that recursively follows links from a starting URL. Its preventOutside option enabled by default is intended to restrict crawling to the same site...
Important: Red Hat Security Advisory: Red Hat Update Infrastructure 5 security update
The latest release of Red Hat Update Infrastructure. For more details, see the product documentation. Red Hat Update Infrastructure RHUI container images are based on the latest RHUI RPM packages and the ubi9 or ubi9-init base images. This release updates to the latest version...
2026-02 .NET 8.0.24 Security Update for ARM64 Client (KB5077863)
2026-02 .NET 8.0.24 Security Update for ARM64 Client KB5077863...
2026-02 Cumulative Update for Windows 10 Version 22H2 for ARM64-based Systems (KB5075912)
2026-02 Cumulative Update for Windows 10 Version 22H2 for ARM64-based Systems KB5075912...
2026-02 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5075906)
2026-02 Cumulative Update for Microsoft server operating system version 21H2 for x64-based Systems KB5075906...