42118 matches found
CVE-2026-16221 vulnerabilities
Vulnerabilities for packages: yaml-language-server, vitess, argo-workflows, tileserver-gl, prism, langfuse, opensearch-dashboards, renovate...
CVE-2026-52688
RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...
USN-8594-1: Linux kernel (OEM) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Drivers core; - Null block...
CVE-2026-59678
CVE-2026-59678 : An reported Incorrect Authorization vulnerability in Linux-Gaming PortProtonQt allows any user to mount/unmount arbitrary file systems and modify network settings via NetworkManager. Affected: PortProtonQt before 0d0f0950ebd948cdf82e8c3e1ebd2bcb9b8bafbe. Impact includes local pri...
UBUNTU-CVE-2026-6390
A flaw was found in GNU nano's multi-buffer error message handling. When a user opens multiple files at startup and one triggers an ALERT-level error, a specially crafted filename containing printf format specifiers can be reinterpreted. This format string vulnerability may allow an attacker to...
SUSE CVE-2026-59901
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the Bzip2Decoder handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a malformed bzip2 stream that permanently captures the...
SUSE CVE-2026-59919
Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.136.Final and 4.2.16.Final, Netty's HAProxy encoder HAProxyMessageEncoder writes AFUNIX source and destination socket addresses into the HAProxy V1 text protocol without validating them for CRLF...
EUVD-2026-48432
An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kernel driver pgsecdl.sys...
ManageEngine AD360 Detection Tool
A proof of concept detection tool for ManageEngine AD360 products affected by CVE-2026-11374. The Python utility safely checks whether an ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, or ADAudit Plus deployment is AD360-integrated and therefore meets the exploit precondition for th...
CVE-2026-38764
Protegent 360 v2.0.0.4 from Unistal Systems Pvt. Ltd. contains a local privilege escalation vulnerability in the kernel driver pgsecdl.sys (CVE-2026-38764). The issue enables a low-privilege local attacker to escalate to SYSTEM, with a CVSS v3.1 base score of 7.8 (High): Local, Low privileges req...
CVE-2026-38763
An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to cause a denial of service via the function sub13828...
GHSA-C97M-VXHJ-P7J6 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-bedrock, crossplane-provider-aws-appsync-fips, crossplane-provider-aws-appmesh-fips, crossplane-provider-aws-configservice-fips, crossplane-provider-aws-waf-fips, crossplane-provider-aws-inspector2-fips,...
CVE-2026-59889 vulnerabilities
Vulnerabilities for packages: zookeeper, ruby3.3-jrjackson, cassandra, confluent-kafka, apache-tika, infinispan, akhq, keycloak-config-cli, thingsboard, apicurio-registry, strimzi-kafka-operator, jenkins-plugin-manager, scala, gradle, apache-nifi-registry, opensearch, wavefront-proxy, druid, tez,...
GHSA-C97M-VXHJ-P7J6 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-memorydb, osv-scanner, mods, crossplane-provider-aws-rds, glab, crossplane-provider-azure-sql, crossplane-provider-aws-kms, crossplane-provider-family-aws, gptscript, crossplane-provider-aws-route53, src, crossplane-provider-aws-cloudformation...
CVE-2026-56852 vulnerabilities
Vulnerabilities for packages: spire-server, vault-secrets-webhook, wolfictl, gitsign, trino, cloud-provider-azure, vault-env, polaris, rancher-telemetry, zarf, kubo, argo-cd, sftpgo-plugin-eventsearch, fluent-bit-plugin-loki, kyverno, crossplane-provider-family-aws, rclone, step-ca, nri-mysql,...
CVE-2026-64834 FFmpeg 0.6.3 - 8.1.2 Infinite Loop DoS via RTP/ASF Demuxer
FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdecasf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtpasffixheader function fails to validate a minimum chunksize when...
Malicious code in veldora (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a848da2622d0adc27e55e1a650c39892aea7ef22c81c4c6ed4e5b6dc64809de Package [email protected] was scanned across 6 files. No evidence of install-time or import-time execution of remote content, no credential or environmen...
MAL-2026-11018 Malicious code in veldora (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a848da2622d0adc27e55e1a650c39892aea7ef22c81c4c6ed4e5b6dc64809de Package [email protected] was scanned across 6 files. No evidence of install-time or import-time execution of remote content, no credential or environmen...