42358 matches found
CVE-2026-6299 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-7VCH-9RMG-WJRJ vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-Q6M3-MCR7-QWWQ vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-W6C2-HH29-88FC vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-X5C8-43VF-FMPC vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-GFJM-PP2M-J8CW vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-H2H4-5M64-M273 vulnerabilities
Vulnerabilities for packages: zipkin, apache-activemq-artemis, geoserver...
CVE-2026-28214
Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the ClumpletReader::getClumpletSize function can overflow the totalLength value when parsing a Wide type clumplet, causing an infinite loop. An authenticated user with INSERT privileges...
CVE-2026-33337
Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, when deserializing a slice packet, the xdrdatum function does not validate that a cstring length conforms to the slice descriptor bounds, allowing a cstring longer than the allocated...
CVE-2026-28212
Firebird is an open-source relational database management system. In versions prior to 6.0.0, 5.0.4, 4.0.7 and 3.0.14, when processing an opslice network packet, the server passes an unprepared structure containing a null pointer to the SDLinfo function, resulting in a null pointer dereference an...
CVE-2025-65104
Firebird is an open-source relational database management system. In versions FB3 of the client library placed incorrect data length values into XSQLDA fields when communicating with FB4 or higher servers, resulting in an information leak. This issue is fixed by upgrading to the FB4 client or...
cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS
A flaw was found in the CUPS printing system’s ippreadio function, which handles Internet Printing Protocol IPP requests. When processing specially crafted printer attribute responses, improper validation can cause a null pointer dereference. This leads to a crash in libcups, potentially disrupti...
JLSEC-2026-151 In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be...
In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. This only affects 32bit systems...
GHSA-6HG6-V5C8-FPHQ vulnerabilities
Vulnerabilities for packages: elasticsearch-fips, apache-activemq, elasticsearch, zipkin, logstash, kafka-fips, spark-fips, tritonserver-backend-vllm-cuda-13.0, kserve-modelmesh, commercial-elasticsearch, solr, apache-pulsar-fips, geoserver, spark, apache-activemq-artemis, hadoop-fips, ghidra,...
CVE-2026-5887 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-6304 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-6308 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-6315 vulnerabilities
Vulnerabilities for packages: chromium...