42356 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-7902
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds memory access in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTM...
Linux Distros Unpatched Vulnerability : CVE-2026-8004
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to...
Linux Distros Unpatched Vulnerability : CVE-2026-7999
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obtain potentially sensitive information from process...
CVE-2026-43258
A flaw was found in the Linux kernel, specifically affecting Alpha systems when memory compaction is enabled. Insufficient Translation Lookaside Buffer TLB shootdown during page migration can lead to sporadic user-space crashes and heap corruption. This vulnerability can result in application...
CVE-2026-40195
Incus is a system container and virtual machine manager. In versions before 7.0.0, missing validation logic in the storage bucket import logic allows an authenticated user with access to the storage bucket feature to cause the Incus daemon to crash. The vulnerability is present in the backup...
CVE-2026-40197
Incus is a system container and virtual machine manager. In versions before 7.0.0, missing validation logic in the storage volume import logic allows an authenticated user with access to the storage volume feature to cause the Incus daemon to crash. The custom volume backup import subsystem...
CVE-2026-41305 vulnerabilities
Vulnerabilities for packages: authentik-fips, jitsucom-jitsu, gitlab-rails-ce-fips, kubeflow-katib, keep, authentik, nextcloud-server, saf, keep-fips, homepage, vite, arangodb, py3-captum, vitess, langfuse-fips, renovate, drupal, langfuse, pelias-api, gitlab-rails-ce...
GHSA-QX2V-QP2M-JG93 vulnerabilities
Vulnerabilities for packages: authentik-fips, jitsucom-jitsu, gitlab-rails-ce-fips, kubeflow-katib, keep, authentik, nextcloud-server, saf, keep-fips, homepage, vite, arangodb, py3-captum, vitess, langfuse-fips, renovate, drupal, langfuse, pelias-api, gitlab-rails-ce...
CVE-2026-42203 vulnerabilities
Vulnerabilities for packages: litellm, airflow...
GHSA-57J5-QWP2-VQP6 vulnerabilities
Vulnerabilities for packages: commercial-grafana, grafana, grafana-fips...
CVE-2026-41131 vulnerabilities
Vulnerabilities for packages: commercial-grafana, grafana, grafana-fips...
CVE-2026-7953
Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via malicious network traffic. Chromium security severity: Medium...
CVE-2026-6691
The MongoDB C Driver's Cyrus SASL integration performs unsafe string copying during username canonicalization, enabling a heap buffer overflow before any authentication or network traffic. This may be triggered by passing untrusted input in the username of a MongoDB URI with authMechanism=GSSAPI...
BIT-JAVA-MIN-2026-20652
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, visionOS 26.3. A remote attacker may be able to cause a denial-of-service...
BIT-JAVA-MIN-2026-20635
The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3, tvOS 26.3, visionOS 26.3, watchOS 26.3. Processing maliciously crafted web content may lead to an unexpected process crash...
BIT-JAVA-2023-42917
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against...
CVE-2026-41168 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-21728 vulnerabilities
Vulnerabilities for packages: grafana...