Grafana security vulnerabilities

Grafana is a set of open-source monitoring tools developed by Grafana Open Source, which provide a visual monitoring interface. This tool is primarily used for monitoring and analyzing Graphite, InfluxDB, and Prometheus. Grafana has a security vulnerability that arises from processing /avatar/:ha...

Grafana security vulnerabilities

Grafana is a set of open-source monitoring tools developed by Grafana Open Source, which provide a visual monitoring interface. This tool is primarily used for monitoring and analyzing Graphite, InfluxDB, and Prometheus. Grafana has a security vulnerability, where the dashboard’s permission API...

Postgres vulnerabilities (CVE-2025-8713, CVE-2025-8714, CVE-2025-8715)

The Postgres vulnerabilities identified are located within open source components utilized by Brocade SANnav, however none of these vulnerabilities are in the executable code path. As a part of good security practice, the open source component was updated in the SANnav 2.4.0b and 3.0.0 releases...

n8n security vulnerabilities

n8n is an open-source, scalable workflow automation tool developed by n8n. n8n has a security vulnerability, which stems from insufficient isolation of the workflow expression evaluation system. This vulnerability could lead to remote code execution...

Code-Projects Mobile Shop Management System security vulnerabilities

Code-Projects Mobile Shop Management System is an open-source mobile store management system developed by Code-Projects. Version 1.0 of the code-projects Mobile Shop Management System contains a security vulnerability, which stems from a file upload vulnerability in the /ExAddProduct.php file...

vLLM code issues and vulnerabilities

vLLM is an open-source solution designed for LLM-based models, featuring high throughput and memory-efficient reasoning and service engines. Prior to vLLM 0.14.1, there were code-related vulnerabilities. These vulnerabilities stemmed from differences in the interpretation of backslashes by variou...

OpenSSL Toolkit 3.3.6

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer and Transport Layer Security protocols with full-strength cryptography world-wide. This is the 3.3 release...

OpenSSL Toolkit 3.4.4

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer and Transport Layer Security protocols with full-strength cryptography world-wide. This is the 3.4 release...

OpenSSL Toolkit 3.5.5

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer and Transport Layer Security protocols with full-strength cryptography world-wide. This is the 3.5 LTS release...

OpenSSL Toolkit 3.6.1

OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer and Transport Layer Security protocols with full-strength cryptography world-wide. This is the 3.6 release...

GPAC code-related vulnerabilities

GPAC is an open-source multimedia framework developed by GPAC. Versions of GPAC prior to 2.4.0 have code vulnerabilities, which stem from a null pointer dereferencing in the file applications/mp4box/filedump.c...

GPAC code-related vulnerabilities

GPAC is an open-source multimedia framework developed by GPAC. Versions of GPAC prior to 2.4.0 have code vulnerabilities, which stem from a null pointer dereferencing in the file applications/mp4box/filedump.c...

MAL-2026-500 Malicious code in zabittest11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08a0084877b46812f2b43eaa232ecb1768d4b4415111ee65c741f2cc7acfa784 The package zabittest11 was found to contain malicious code. Source: ossf-package-analysis...

[SECURITY] Fedora 42 Update: pgadmin4-9.11-2.fc42

pgAdmin is the most popular and feature rich Open Source administration and d evelopment platform for PostgreSQL, the most advanced Open Source database in the world...

PT-2026-4692

Name of the Vulnerable Software and Affected Versions versions prior to 2025-48653 Description A logic error in the code within the loadDataAndPostValue function of multiple files may allow for obscured permission usage. This could result in local escalation of privilege without requiring...

PT-2026-4687

Name of the Vulnerable Software and Affected Versions versions prior to 2025 affected versions not specified Description A persistent denial of service may occur due to improper input validation. This can result in a local denial of service without requiring additional execution privileges or use...

PT-2026-4697

Name of the Vulnerable Software and Affected Versions Android Framework affected versions not specified Description In the updateProvidersWhenServiceRemoved function of CredentialManagerService.java, a permissions bypass allows settings to be overridden across different users. This flaw can lead ...

PT-2026-4686

Name of the Vulnerable Software and Affected Versions SoftwareX affected versions not specified Description A logic error exists in the jump to payload function within payload.rs. This issue may result in local information disclosure without requiring additional execution privileges or user...

Linux Kernel Security Vulnerabilities

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the presence of null pointers, potentially leading to kernel crashes...

Linux Kernel Security Vulnerabilities

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a failure in file configuration rollback, potentially leading to kernel crashes...