449 matches found
Vulnerabilities are handled in GitLab Community Edition and Enterprise Edition
GitLab Inc. has identified several vulnerabilities in GitLab Enterprise Edition EE and other versions of GitLab, particularly in releases from version 8.3 to 19.1.1, with a focus on versions around 18.11.6, 19.0.3, and 19.1.1. These vulnerabilities affect various components of GitLab, including t...
GHSA-WFQX-GJRF-G28R Crossplane: Signature verification TOCTOU allows installing unverified package content via mutable tag
Summary Crossplane allows package signature verification to be configured via the ImageConfig mechanism. When enabled, the package manager uses cosign to verify that packages are correctly signed before pulling and installing them. When a package is installed using a tag reference e.g., a semanti...
DEBIAN-CVE-2026-44942
A path traversal in handling the "path" component of .repo files processed by libzypp before 17.38.13 in the 17.x series, or before 16.22.19 could be used by attackers to fill directories on the system outside of the zypp cache with content...
CVE-2026-41984
UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity...
CVE-2026-41985
UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity...
CVE-2026-41984
UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity...
CVE-2026-41985
UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity...
CVE-2026-41985
UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity...
CVE-2026-41985
Technical details about CVE-2026-41985 are not publicly available in the provided documents. Monitor for updates from Huawei advisories and NVD/CVE listings for affected products, impact, and remediation.
CVE-2026-41985
UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity...
EUVD-2026-35357
UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity...
CVE-2026-41984
Technical details about CVE-2026-41984 are not publicly available in the provided documents. Monitor for updates from the listed vendor references.
CVE-2026-41984
UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity...
CVE-2026-41984
UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity...
EUVD-2026-35356
UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity...
PT-2026-47700
UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity...
PT-2026-47701
UAF vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service integrity...
Huawei HarmonyOS 访问控制错误漏洞
Huawei HarmonyOS is a distributed operating system developed by Huawei Corporation. It is designed for comprehensive scenarios and primarily offers features such as cross-device collaboration, security protection, and intelligent services. There is an access control vulnerability in the package...
Astra Linux – Vulnerability in rpm
A flaw was discovered in RPM’s signature check functionality when reading a package file. This flaw allows an attacker who can persuade a victim to install a seemingly verifiable package, whose signature header was modified, to cause corruption of the RPM database and execute malicious code. The...
RHSA-2026:16736 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...