42358 matches found
CVE-2026-41242 vulnerabilities
Vulnerabilities for packages: pulumi, langfuse-fips, langfuse, kubeflow-centraldashboard, renovate, opentelemetry-auto-instrumentations-node, jitsucom-jitsu, kibana, librechat, nemo, gemini-cli, vitess...
CVE-2026-40494
SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to commit 45d48d1f2e8e0d73e80bc1fd5310cb57f4547302, the TGA codec's RLE decoder in tga.c has an asymmetric bounds check vulnerability. The run-packet path line 297 correctl...
CVE-2026-40492
SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to commit 36aa5c7ec8a2bb35f6fb867a1177a6f141156b02, the XWD codec resolves pixel format based on pixmapdepth but the byte-swap code uses bitsperpixel independently. When...
CVE-2026-40611 vulnerabilities
Vulnerabilities for packages: traefik, sftpgo...
GHSA-497X-RRR9-68JP vulnerabilities
Vulnerabilities for packages: grafana, grafana-alloy...
CVE-2026-40336
libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 have a memory leak in ptpunpackSonyDPD in camlibs/ptp2/ptp-pack.c lines 884–885. When processing a secondary enumeration list introduced in 2024+ Sony cameras, the function overwrites dpd-FORM.Enum.SupportedVal...
EUVD-2026-23603
The Sentry kernel is a high security level micro-kernel implementation made for high security embedded systems. A given task with one of the DEV or IO capability is able to interact with another task's IRQ line through the sysint syscall familly. Prior to version 0.4.7, this can lead to DoS and...
ruby: Properly initialize the random number generator when forking new process
Ruby before 1.8.7-p352 does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the values of random numbers by leveraging knowledge of the number sequence obtained in a different child process, a related issue to CVE-2003-0900. NOTE: this issu...
CVE-2026-40342
Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the external engine plugin loader concatenates a user-supplied engine name into a filesystem path without filtering path separators or .. components. An authenticated user with CREATE...
CVE-2026-34477 vulnerabilities
Vulnerabilities for packages: solr, celeborn, airflow, apache-pulsar, strimzi-kafka-operator, zipkin, kafka, logstash, opensearch, wavefront-proxy, apache-activemq-artemis, spark, akhq, neo4j, sonarqube, infinispan, kserve-modelmesh, flink...
CVE-2026-5862 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-5865 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-5874 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-5898 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-5907 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-5919 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-6300 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-6304 vulnerabilities
Vulnerabilities for packages: chromium...