589 matches found
CVE-2026-21045
Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so prior to SMR Jul-2026 Release 1 allows remote attackers to write out-of-bounds memory...
MAL-2026-7315 Malicious code in lreactjs (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7152 Malicious code in angularss (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9822 Malicious code in zw_nobdr_day2 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9750 Malicious code in zrgvsearch65d4 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-9733 Malicious code in zrgvp5 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-8892 Malicious code in sproxytestgitone (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-8170 Malicious code in oaidx3409275 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
RHSA-2026:35830 Red Hat Security Advisory: grafana security update
Bulletin has no description...
RHSA-2026:35806 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Bulletin has no description...
CVE-2026-38970
pdfcpu through v0.11.1 contains an uncontrolled-recursion denial-of-service issue in pkg/pdfcpu/model/parse.go. The parser descends recursively through nested PDF objects, including arrays, via ParseObjectContext and parseArray without enforcing a maximum nesting depth...
UBUNTU-CVE-2026-13149
brace-expansion through 5.0.6 is vulnerable to denial of service. The expand function exhibits exponential-time complexity in the number of consecutive non-expanding '' brace groups. An attacker who passes a crafted string to expand, directly or transitively, can cause significant CPU consumption...
GO-2026-5509 Casdoor vulnerable to Open Redirect in github.com/casdoor/casdoor
Casdoor vulnerable to Open Redirect in github.com/casdoor/casdoor...
GO-2026-5398 NietThijmen ShoppingCart: Command injection in the connect function in github.com/NietThijmen/ShoppingCart
NietThijmen ShoppingCart: Command injection in the connect function in github.com/NietThijmen/ShoppingCart...
DEBIAN-CVE-2026-53158
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix NULL pointer dereference in rpmsg callback A NULL pointer dereference was observed on Hawi at boot when the DSP sends a glink message before fastrpcrpmsgprobe has completed initialization: Unable to handle kern...
UBUNTU-CVE-2026-52964
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans The USB MIDI 2.0 endpoint parser has the same descriptor walking pattern as the legacy MIDI parser. It validates bLength against bNumGrpTrmBlock before reading...
UBUNTU-CVE-2026-42489
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To create and manage guests, domctl operations are used by the control domain, a possible Xenstore domain, or by a domain controlling a particular guest. Some of these...
[SECURITY] Fedora 44 Update: openslide-4.0.0-14.fc44
The OpenSlide library allows programs to access virtual slide files regardless of the underlying image format...