GHSA-V6W7-GQ3G-FWVM vulnerabilities

Vulnerabilities for packages: qemu...

CVE-2021-20255 vulnerabilities

Vulnerabilities for packages: qemu...

CVE-2024-6519 vulnerabilities

Vulnerabilities for packages: qemu...

CVE-2024-8354 vulnerabilities

Vulnerabilities for packages: qemu...

GHSA-3QX7-FF8P-6J2R vulnerabilities

Vulnerabilities for packages: qemu...

GHSA-V9PM-V9P5-H96X vulnerabilities

Vulnerabilities for packages: qemu...

GHSA-XX3P-5M4J-RHW8 vulnerabilities

Vulnerabilities for packages: qemu...

GHSA-3QX7-FF8P-6J2R vulnerabilities

Vulnerabilities for packages: qemu...

CVE-2024-6505 vulnerabilities

Vulnerabilities for packages: qemu...

GHSA-V6W7-GQ3G-FWVM vulnerabilities

Vulnerabilities for packages: qemu...

CVE-2021-20255 vulnerabilities

Vulnerabilities for packages: qemu...

CVE-2024-6519 vulnerabilities

Vulnerabilities for packages: qemu...

CVE-2024-8354 vulnerabilities

Vulnerabilities for packages: qemu...

GHSA-XX3P-5M4J-RHW8 vulnerabilities

Vulnerabilities for packages: qemu...

GHSA-V9PM-V9P5-H96X vulnerabilities

Vulnerabilities for packages: qemu...

CVE-2026-46606

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, the Glances KVM/QEMU monitoring engine glances/plugins/vms/engines/virsh.py passes VM domain names, read directly from virsh list --all output, into f-string command templates that are processed by securepopen...

CVE-2026-46606 Glances: Command Injection via KVM/QEMU VM Domain Names in glances/plugins/vms/engines/virsh.py

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, the Glances KVM/QEMU monitoring engine glances/plugins/vms/engines/virsh.py passes VM domain names, read directly from virsh list --all output, into f-string command templates that are processed by securepopen...

CVE-2026-46606 Glances: Command Injection via KVM/QEMU VM Domain Names in glances/plugins/vms/engines/virsh.py

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, the Glances KVM/QEMU monitoring engine glances/plugins/vms/engines/virsh.py passes VM domain names, read directly from virsh list --all output, into f-string command templates that are processed by securepopen...

PT-2026-52632

A server-side request forgery SSRF flaw was found in KubeVirt's virt-api port-forward handler. When processing a port-forward request to a VirtualMachineInstance VMI, virt-api reads the target IP from vmi.Status.Interfaces0.IP and passes it directly to net.Dial without validation. For VMIs using...

CVE-2026-46606: Improper Neutralization of Special Elements used in an OS Command

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.5, the Glances KVM/QEMU monitoring engine glances/plugins/vms/engines/virsh.py passes VM domain names, read directly from virsh list --all output, into f-string command templates that are processed by securepopen...