CVE-2026-55564

Out-of-bounds read in glyphcacheget via crafted glyph fragments...

PT-2026-56995

Name of the Vulnerable Software and Affected Versions Discourse versions prior to 2026.6.0 Discourse versions prior to 2026.5.1 Discourse versions prior to 2026.4.2 Discourse versions prior to 2026.1.5 Description Secure uploads may be exposed through the pull hotlinked images function when the...

RHCOS 4 : OpenShift Container Platform 4.19.37 (RHSA-2026:34755)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:34755 advisory. - Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code CVE-2026-35469 Note that Nessus...

CVE-2026-15120

CVE-2026-15120 affects Google Chrome on Windows (Core). A use-after-free in Core, triggered by a crafted HTML page after renderer compromise, could enable a sandbox escape. Impact is described as high; patch to Chrome 150.0.7871.115 or later (Windows). Exploitation status is not specified in the ...

CVE-2026-35211

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 7.260401.0, the OpenCTI GraphQL API exposes a script filter operator in its FilterOperator enum that allows any authenticated user with the KNOWLEDGE capability to pass user-supplied...

CVE-2026-15166

IEEE 802.11 protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...

GHSA-P4GQ-832X-FM9V vulnerabilities

Vulnerabilities for packages: py3-nltk, open-webui...

GHSA-P4GQ-832X-FM9V vulnerabilities

Vulnerabilities for packages: open-webui, py3-nltk, apache-beam-python-3.11-sdk, nemo, label-studio, apache-beam-python-3.13-sdk, apache-beam-python-3.12-sdk...

CVE-2026-54293 vulnerabilities

Vulnerabilities for packages: open-webui, py3-nltk, apache-beam-python-3.11-sdk, nemo, label-studio, apache-beam-python-3.13-sdk, apache-beam-python-3.12-sdk...

CVE-2026-50812

A NULL pointer dereference in the SQLite Session Extension in SQLite 3.53.1 and SQLite trunk builds before check-in e807d4e3798efd53 allows an attacker who can supply a malformed changeset blob to cause a denial of service. The issue occurs when sqlite3changesetapplyv3 applies a corrupt changeset...

CVE-2026-59938

pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PDF with declared image size values that are much too large compared to the actual data, causing large memory usage in pypdf image parsing. This issue is fixed in version 6.14.0...

Apache Tomcat: Apache Tomcat: Missing Encryption of Sensitive Data due to EncryptInterceptor bypass

A flaw was found in Apache Tomcat. This vulnerability, categorized as Missing Encryption of Sensitive Data, arises from a bypass in the EncryptInterceptor, a component designed to ensure data encryption. This bypass, introduced as a fix for CVE-2026-29146, allows sensitive data to remain...

MAL-2026-6993 Malicious code in bytefaas-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07cb4f68cec68081ac4817ad2ae387e7b031d3377a74a74ecca59c5858940d08 Package published at version 9999.0.0 under the name bytefaas-sdk, the canonical dependency-confusion shape used to shadow a private internal package...

CVE-2026-52967 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-52967 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-25681 affecting package multus for versions less than 4.0.2-9

CVE-2026-25681 affecting package multus for versions less than 4.0.2-9. A patched version of the package is available...

CVE-2026-53134 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-53134 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-43052 affecting package kernel for versions less than 6.6.142.1-1

CVE-2026-43052 affecting package kernel for versions less than 6.6.142.1-1. A patched version of the package is available...

CVE-2026-43019 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-43019 affecting package kernel for versions less than 6.6.143.1-1. A patched version of the package is available...

CVE-2026-52908 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-52908 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-52912 affecting package kernel for versions less than 6.6.143.1-1

CVE-2026-52912 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...