GO-2026-6610 vulnerabilities

Vulnerabilities for packages: vault-k8s, kargo, crossplane-provider-azure-storagecache, crossplane-provider-aws-amp, cloud-sql-proxy, crossplane-provider-aws-directconnect, local-static-provisioner, clickhouse-operator, crossplane-provider-aws-ssoadmin, frankenphp-8.5, crossplane-provider-aws-ce,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: mattermost, tempo, dapr, aws-fsx-csi-driver, crossplane-provider-azure-storagecache, crossplane-provider-aws-amp, temporal-server, cloud-sql-proxy, crossplane-provider-aws-directconnect, caddy, local-static-provisioner, clickhouse-operator,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: mattermost, tempo, dapr, aws-fsx-csi-driver, crossplane-provider-azure-storagecache, crossplane-provider-aws-amp, temporal-server, cloud-sql-proxy, crossplane-provider-aws-directconnect, local-static-provisioner, clickhouse-operator, crossplane-provider-aws-ssoadmin,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: mattermost, tempo, dapr, aws-fsx-csi-driver, crossplane-provider-azure-storagecache, crossplane-provider-aws-amp, temporal-server, cloud-sql-proxy, crossplane-provider-aws-directconnect, local-static-provisioner, clickhouse-operator, crossplane-provider-aws-ssoadmin,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: vault-k8s, mattermost, tempo, dapr, aws-fsx-csi-driver, crossplane-provider-azure-storagecache, crossplane-provider-aws-amp, temporal-server, cloud-sql-proxy, crossplane-provider-aws-directconnect, local-static-provisioner, frankenphp-8.5,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: vault-k8s, mattermost, tempo, dapr, aws-fsx-csi-driver, crossplane-provider-azure-storagecache, crossplane-provider-aws-amp, temporal-server, cloud-sql-proxy, crossplane-provider-aws-directconnect, local-static-provisioner, frankenphp-8.5,...

CVE-2026-43910 Appium java-client Allows Network Pivot via Unvalidated directConnect Redirect in AppiumCommandExecutor

Appium Java Client is the Java language binding for writing Appium tests that conform to the W3C WebDriver protocol. From 8.2.1 until 10.1.1, when directConnecttrue is enabled, AppiumCommandExecutor.setDirectConnect reads the directConnectHost, directConnectPort, and directConnectPath fields from...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-portal, terragrunt, crossplane, osv-scanner, databricks-cli, terraform-provider-azurerm-fips, crossplane-provider-aws-elbv2-fips, wal-g, crossplane-provider-azure-network, crossplane-provider-aws-iam, trivy-operator, gitlab-pages,...

EUVD-2010-4496

Malware in sbrugna...

DEBIAN-CVE-2010-4528

directconn.c in the MSN protocol plugin in libpurple 2.7.6 through 2.7.8 in Pidgin before 2.7.9 allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a short p2pv2 packet in a DirectConnect aka direct connection session...

CVE-2010-4528

directconn.c in the MSN protocol plugin in libpurple 2.7.6 through 2.7.8 in Pidgin before 2.7.9 allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a short p2pv2 packet in a DirectConnect aka direct connection session...

Null pointer dereference

directconn.c in the MSN protocol plugin in libpurple 2.7.6 through 2.7.8 in Pidgin before 2.7.9 allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a short p2pv2 packet in a DirectConnect aka direct connection session...

CVE-2010-4528

directconn.c in the MSN protocol plugin in libpurple 2.7.6 through 2.7.8 in Pidgin before 2.7.9 allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a short p2pv2 packet in a DirectConnect aka direct connection session...

CVE-2010-4528

directconn.c in the MSN protocol plugin in libpurple 2.7.6 through 2.7.8 in Pidgin before 2.7.9 allows remote authenticated users to cause a denial of service NULL pointer dereference and application crash via a short p2pv2 packet in a DirectConnect aka direct connection session...

PT-2011-1591

Name of the Vulnerable Software and Affected Versions Pidgin versions 2.7.6 through 2.7.8 Description The issue allows remote authenticated users to cause a denial of service, resulting in a NULL pointer dereference and application crash. This occurs via a short p2pv2 packet in a DirectConnect...