614311 matches found
CVE-2026-48571 Windows App Package Installer Elevation of Privilege Vulnerability
...
CVE-2026-48571 Windows App Package Installer Elevation of Privilege Vulnerability
...
CVE-2026-48572 Windows App Package Installer Elevation of Privilege Vulnerability
...
CVE-2026-48572 Windows App Package Installer Elevation of Privilege Vulnerability
...
CVE-2026-11403
A vulnerability in Sonatype Nexus Repository Manager's format-specific API key generation may allow a remote attacker to gain unauthorized access to repository operations as a targeted user. A format-specific API key realm NuGet API Key, Docker Bearer Token, or npm Bearer Token must be enabled an...
Important: Red Hat Security Advisory: git-lfs security update
An update for git-lfs is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
CVE-2026-15697 svgdotjs svg.js npm Package API EventTarget.on prototype pollution
A vulnerability was found in svgdotjs svg.js up to 3.2.5. This affects the function EventTarget.on of the file svgdotjs/svg.js of the component npm Package API. Performing a manipulation results in improperly controlled modification of object prototype attributes. The attack may be initiated...
CVE-2026-15697 svgdotjs svg.js npm Package API EventTarget.on prototype pollution
A vulnerability was found in svgdotjs svg.js up to 3.2.5. This affects the function EventTarget.on of the file svgdotjs/svg.js of the component npm Package API. Performing a manipulation results in improperly controlled modification of object prototype attributes. The attack may be initiated...
CVE-2026-10672 Unterminated URI buffer causes out-of-bounds read in LwM2M firmware pull (Package URI)
subsys/net/lib/lwm2m/lwm2mpullcontext.c copied the firmware-update Package URI into a fixed static buffer context.uri, size CONFIGLWM2MSWMGMTPACKAGEURILEN, default 128 with memcpycontext.uri, uri, LWM2MPACKAGEURILEN, copying exactly the destination size with no length validation. The...
CVE-2026-10672
CVE-2026-10672 affects Zephyr LwM2M firmware Update pull: a memcpy(context.uri, uri, LWM2M_PACKAGE_URI_LEN) into a 128-byte buffer, with no length validation, copies up to 128 bytes of a server URI and omits the NUL terminator. Subsequent strlen and CoAP/PROXY_URI parsing read past the end into a...
CVE-2026-10672 Unterminated URI buffer causes out-of-bounds read in LwM2M firmware pull (Package URI)
subsys/net/lib/lwm2m/lwm2mpullcontext.c copied the firmware-update Package URI into a fixed static buffer context.uri, size CONFIGLWM2MSWMGMTPACKAGEURILEN, default 128 with memcpycontext.uri, uri, LWM2MPACKAGEURILEN, copying exactly the destination size with no length validation. The...
net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME
A flaw was found in the net package of Go golang, specifically when using the LookupCNAME function with the cgo DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name CNAME response. This can trigger a double-free of C memory, leading to a crash and a Denial of...
CVE-2026-59875 vulnerabilities
Vulnerabilities for packages: code-server, graalvm, kibana, wazuh-dashboard, gitlab-rails-ce, npm, opensearch-dashboards-fips, prism, pulumi, wazuh-dashboard-fips, saf, lerna, actions-runner, gitlab-rails-ce-fips, sqlpad, kubeflow-centraldashboard, opensearch-dashboards...
CVE-2026-59874 vulnerabilities
Vulnerabilities for packages: code-server, graalvm, homepage, kibana, gitlab-rails-ce, npm, wazuh-dashboard, opensearch-dashboards-fips, prism, pulumi, wazuh-dashboard-fips, saf, lerna, actions-runner, gitlab-rails-ce-fips, sqlpad, kubeflow-centraldashboard, opensearch-dashboards...
CVE-2026-59873 vulnerabilities
Vulnerabilities for packages: code-server, graalvm, homepage, kibana, gitlab-rails-ce, npm, wazuh-dashboard, opensearch-dashboards-fips, prism, pulumi, wazuh-dashboard-fips, saf, lerna, actions-runner, gitlab-rails-ce-fips, sqlpad, kubeflow-centraldashboard, opensearch-dashboards...
GHSA-GF2W-JQMQ-FCM8 vulnerabilities
Vulnerabilities for packages: python...
GHSA-9MC4-RQMQ-H467 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-59875 vulnerabilities
Vulnerabilities for packages: npm, kubeflow-centraldashboard, pulumi, code-server, saf, sqlpad, lerna, prism...