5168 matches found
[SECURITY] Fedora 43 Update: prometheus-3.13.1-1.fc43
The Prometheus monitoring system and time series database...
CVE-2026-15392
DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location. The completetablename method builds the absolute table file path without checking whether the file is a symbolic link. A link inside the data directory can point to a table file at any...
CVE-2026-15719
We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbird 140.13...
CVE-2026-15719
We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbird 140.13...
CVE-2026-15043
DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted = SQL operators on text. DBI::SQL::Nano, DBI's built-in mini-SQL engine, evaluated WHERE predicates incorrectly in some cases. In the non-numeric string branch of the ismatched method, = was evaluated using Perl's le operator...
CVE-2026-12606
Eclipse Grizzly in versions before 5.0.2, cannot properly parse the trailer section in malformed trailer header's line, which can be leveraged to perform HTTP request smuggling. Grizzly 5.0.1 supports system properties that enable the behavior that fixes the vulnerability - set...
CVE-2022-24785 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, wazuh-dashboard-fips...
ROS-20260713-73-0044
The vulnerability in libheif is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-45571 affecting package packer for versions less than 1.9.5-17
CVE-2026-45571 affecting package packer for versions less than 1.9.5-17. An upgraded version of the package is available that resolves this issue...
CVE-2026-8926 affecting package curl for versions less than 8.11.1-10
CVE-2026-8926 affecting package curl for versions less than 8.11.1-10. A patched version of the package is available...
CVE-2026-56002 affecting package libXfont2 for versions less than 2.0.8-1
CVE-2026-56002 affecting package libXfont2 for versions less than 2.0.8-1. An upgraded version of the package is available that resolves this issue...
GHSA-FPG8-7664-JC5Q vulnerabilities
Vulnerabilities for packages: dagdotdev...
CVE-2026-57585 affecting package python-msgpack for versions less than 1.0.5-3
CVE-2026-57585 affecting package python-msgpack for versions less than 1.0.5-3. A patched version of the package is available...
CVE-2026-49851 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, jupyter-base-notebook...
GHSA-V853-W46P-FV2H vulnerabilities
Vulnerabilities for packages: apache-tomee, geoserver...
CVE-2026-45505 vulnerabilities
Vulnerabilities for packages: apache-tomee, geoserver...
CVE-2026-53256 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-gcp, linux-qemu-melange, linux-azure...
GHSA-GJ4P-2QJV-WCHV vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-gcp, linux-qemu-melange, linux-azure...