5168 matches found
CVE-2026-0877
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7...
CVE-2026-0892
Memory safety bugs present in Firefox 146 and Thunderbird 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 147 and Thunderbird 147...
CVE-2026-0885
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 147, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7...
CVE-2026-0881
Sandbox escape in the Messaging System component. This vulnerability was fixed in Firefox 147 and Thunderbird 147...
ROS-20260113-7379
Vulnerability in kernel-lt related to insufficient control of the resource during its existence. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
wireshark: Access of Uninitialized Pointer in Wireshark
An uninitialized pointer access has been discovered in Wireshark. An attacker who can provide crafted input may be able to leverage this pointer access weakness to crash the application...
CVE-2025-61661 affecting package grub2 for versions less than 2.06-26
CVE-2025-61661 affecting package grub2 for versions less than 2.06-26. A patched version of the package is available...
CVE-2025-2924 affecting package hdf5 for versions less than 1.14.6-1
CVE-2025-2924 affecting package hdf5 for versions less than 1.14.6-1. A patched version of the package is available...
CVE-2025-12084 affecting package python3 for versions less than 3.12.9-7
CVE-2025-12084 affecting package python3 for versions less than 3.12.9-7. A patched version of the package is available...
CVE-2025-6750 affecting package hdf5 for versions less than 1.14.6-1
CVE-2025-6750 affecting package hdf5 for versions less than 1.14.6-1. A patched version of the package is available...
CVE-2025-6816 affecting package hdf5 for versions less than 1.14.6-1
CVE-2025-6816 affecting package hdf5 for versions less than 1.14.6-1. A patched version of the package is available...
CVE-2025-38627 affecting package kernel for versions less than 6.6.119.3-1
CVE-2025-38627 affecting package kernel for versions less than 6.6.119.3-1. A patched version of the package is available...
CVE-2025-62408 affecting package fluent-bit for versions less than 3.1.10-4
CVE-2025-62408 affecting package fluent-bit for versions less than 3.1.10-4. A patched version of the package is available...
GHSA-4F6G-68PF-7VHV vulnerabilities
Vulnerabilities for packages: open-webui...
wireshark: Access of Uninitialized Pointer in Wireshark
An uninitialized pointer access has been discovered in Wireshark. An attacker who can provide crafted input may be able to leverage this pointer access weakness to crash the application...
ROS-20260112-7309
A vulnerability in the llcpsock.c component of the Linux kernel is related to reading outside the allowed data buffer boundaries. Exploitation of the vulnerability could allow an attacker to cause a denial of service as well...
GHSA-VPFW-47H7-XJ4G vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, ruby3.3-rack, ruby4.0-rack, ruby3.4-rack, ruby3.2-rack...
CVE-2026-22703
Cosign provides code signing and transparency for containers and binaries. Prior to versions 2.6.2 and 3.0.4, Cosign bundle can be crafted to successfully verify an artifact even if the embedded Rekor entry does not reference the artifact's digest, signature or public key. When verifying a Rekor...