10171 matches found
CVE-2026-68744
A flaw was found in SSSD. The sssnssprotocolfillinitgr function in the NSS responder pre-allocates reply space for all group entries but does not shrink the packet when groups are skipped, causing uninitialized heap bytes to be transmitted to the client. A local attacker can exploit this to...
CVE-2022-21680 vulnerabilities
Vulnerabilities for packages: arangodb...
GHSA-88FW-V6X4-3F58 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, camunda-zeebe...
GHSA-M4P7-R5RC-7G4J vulnerabilities
Vulnerabilities for packages: airflow, mlflow, superset, py3-cassandra-medusa, kubeflow-pipelines, kserve...
CVE-2026-59884 vulnerabilities
Vulnerabilities for packages: authentik-fips, kserve, datahub-ingestion, duplicity, kubeflow-pipelines, dbt-bigquery, lmcache-cuda-12.8, wazuh-manager-fips, openstack-keystone-2025.1, authentik, apache-beam-python-3.12-sdk, airflow, superset, wazuh-manager, mlflow, localstack, py3-cassandra-medus...
CVE-2026-67338
JupyterLab before 4.5.9 contains a stored cross-site scripting vulnerability in the Extension Manager that fails to validate URI protocols in package metadata URLs. Attackers can publish malicious PyPI packages with javascript: URLs in project metadata that execute arbitrary JavaScript in the...
CVE-2026-67320
axios in a Node.js deployment using the HTTP adapter can route requests through an attacker-controlled proxy. axios hardens merged request configuration by creating a null-prototype object, but request interceptors run after the merge; a common immutable interceptor pattern such as ...config or...
SUSE CVE-2026-55244
unknown...
CVE-2026-53669 vulnerabilities
Vulnerabilities for packages: keycloak, vitess...
GHSA-94P4-4CQ8-9G67 vulnerabilities
Vulnerabilities for packages: mlflow...
GHSA-VJC4-5QP5-M44J vulnerabilities
Vulnerabilities for packages: open-webui, mlflow, superset...
GHSA-WXPP-56Q6-5PCG vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, zipkin, keycloak-config-cli...
GHSA-CHX6-HX7R-MCP5 vulnerabilities
Vulnerabilities for packages: vitess...
GHSA-5F52-PX6M-C5HW vulnerabilities
Vulnerabilities for packages: wget...
GHSA-FXF9-RXPJ-26GX vulnerabilities
Vulnerabilities for packages: wget...
GHSA-H8FP-F39C-Q6MH vulnerabilities
Vulnerabilities for packages: vitess...
CVE-2026-58470 vulnerabilities
Vulnerabilities for packages: wget...
SUSE CVE-2026-55998
The endpoint /v3/import/tokenclusterId.yaml retrieves the cluster object before validating the token. When a valid cluster ID references a cluster that has private registry secrets configured, a nil pointer dereference in pkg/systemtemplate/privateregistry.go causes the request to return HTTP 502...
SUSE CVE-2026-62291
libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted image sequence with a 2x2 primary plane and a 256x256 auxiliary alpha plane can cause attacker-controlled heap corruption during a normal decode and re-encode workflow. TrackVisual::decodenextimagesample...