GHSA-4G2F-XCPH-2335 vulnerabilities

Vulnerabilities for packages: ingress-nginx-controller-fips, ingress-nginx-controller...

GHSA-CQP7-WF4C-3XGC vulnerabilities

Vulnerabilities for packages: grafana-fips...

CVE-2025-3260 vulnerabilities

Vulnerabilities for packages: grafana-fips...

GHSA-4PWP-CX67-5CPX vulnerabilities

Vulnerabilities for packages: grafana-fips...

CVE-2025-23391 vulnerabilities

Vulnerabilities for packages: harvester-fips, harvester...

CVE-2024-58260 vulnerabilities

Vulnerabilities for packages: harvester-fips, harvester...

CVE-2025-54468 vulnerabilities

Vulnerabilities for packages: harvester-fips, harvester...

CVE-2026-42183 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-fips, argo-workflows-fips, kubeflow-pipelines, argo-workflows, kubeflow-pipelines-driver-fips...

MINI-3484-754J-QWMR

Bulletin has no description...

ST Engineering iDirect iQ-Series Terminals (Update A)

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access to device information or cause a denial-of-service condition. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these...

GHSA-WPHV-VFRH-23Q5 vulnerabilities

Vulnerabilities for packages: localstack, airflow...

CVE-2026-48990 vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-WPHV-VFRH-23Q5 vulnerabilities

Vulnerabilities for packages: airflow...

Linux Distros Unpatched Vulnerability : CVE-2026-14410

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to perform UI...

Linux Distros Unpatched Vulnerability : CVE-2026-14381

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect security UI in WebAppInstalls in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromi...

Linux Distros Unpatched Vulnerability : CVE-2026-14407

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HT...

Linux Distros Unpatched Vulnerability : CVE-2026-13316

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in foreman when HTTP parameters are modified in httpproxiescontroller and httpproxy files. Attackers can perform an SSRF attack and steal...

Linux Distros Unpatched Vulnerability : CVE-2026-57963

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker who can send HTML chat messages via Matrix or XMPP can inject arbitrary styled content, phishing links, and CSS that manipulates the chat UI. This...

Linux Distros Unpatched Vulnerability : CVE-2026-53331

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - slimbus: qcom-ngd-ctrl: Avoid ABBA on txlock/ctrl-lock During the SSR/PDR down notification the txlock is taken with the intent to provide synchronization with...

CVE-2026-47714

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, the inline mask parsing code in libheif/region.cc contains an integer overflow. Both width and height are unsigned int 32-bit values parsed from the HEIF file. Their product can exceed UINT32MAX, wrapping to...