3405 matches found
CVE-2026-27940
llama.cpp is an inference of several LLM models in C/C++. Prior to b8146, the ggufinitfromfileimpl in gguf.cpp is vulnerable to an Integer overflow, leading to an undersized heap allocation. Using the subsequent fread writes 528+ bytes of attacker-controlled data past the buffer boundary. This is...
GHSA-7XRH-HQFC-G7QR vulnerabilities
Vulnerabilities for packages: spark, solr, kserve-modelmesh, akhq, apache-activemq-artemis, zookeeper, apache-nifi, strimzi-kafka-operator, trino, apache-pulsar...
CVE-2025-69219 vulnerabilities
Vulnerabilities for packages: airflow...
CVE-2025-67873 affecting package rust for versions less than 1.90.0-4
CVE-2025-67873 affecting package rust for versions less than 1.90.0-4. A patched version of the package is available...
CVE-2026-29786 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, kibana, node-gyp, graalvm, sqlpad, actions-runner, wazuh-dashboard-fips, py3-jupyterlab, lerna, npm, pulumi, drupal, pnpm-stage0, saf, tileserver-gl-fips, tileserver-gl, kubeflow-katib, gemini-cli, redisinsight, gitlab-rails-ce-fips,...
CVE-2026-28690
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-16 and 6.9.13-41, a stack buffer overflow vulnerability exists in the MNG encoder. There is a bounds checks missing that could corrupting the stack with attacker-controlled data...
CVE-2026-28420 affecting package vim for versions less than 9.2.0088-1
CVE-2026-28420 affecting package vim for versions less than 9.2.0088-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-39937 affecting package kernel for versions less than 5.15.200.1-1
CVE-2025-39937 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-39845 affecting package kernel for versions less than 5.15.200.1-1
CVE-2025-39845 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-39749 affecting package kernel for versions less than 5.15.200.1-1
CVE-2025-39749 affecting package kernel for versions less than 5.15.200.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-28417 affecting package vim for versions less than 9.2.0088-1
CVE-2026-28417 affecting package vim for versions less than 9.2.0088-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-3520 vulnerabilities
Vulnerabilities for packages: redisinsight, librechat...
CVE-2026-25674
An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. Race condition in file-system storage and file-based cache backends in Django allows an attacker to cause file system objects to be created with incorrect permissions via concurrent requests, where one thread's...
GHSA-F3VJ-J2M6-8HFJ vulnerabilities
Vulnerabilities for packages: postgresql...
SUSE CVE-2026-28417
Vim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the netrw standard plugin bundled with Vim. By inducing a user to open a crafted URL e.g., using the scp:// protocol handler, an attacker can execute arbitrary shell command...
CVE-2024-56373 vulnerabilities
Vulnerabilities for packages: airflow, airflow-core...
CVE-2026-22728 vulnerabilities
Vulnerabilities for packages: kots...
CVE-2026-22728 vulnerabilities
Vulnerabilities for packages: kots...