GHSA-6R46-2QJX-J5J3 vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

GHSA-5MCP-3252-F5VR vulnerabilities

Vulnerabilities for packages: nginx-mainline...

GHSA-GGR6-FMR8-2M8G vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

CVE-2026-42530 vulnerabilities

Vulnerabilities for packages: nginx-mainline...

CVE-2026-32647 vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

GHSA-6364-X4QJ-7W59 vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

CVE-2026-40701 vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

GHSA-6VMC-2WH4-77QP vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

CVE-2026-27654 vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

CVE-2026-27651 vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

CVE-2026-28753 vulnerabilities

Vulnerabilities for packages: nginx-stable, nginx-mainline...

CVE-2026-18809 vulnerabilities

Vulnerabilities for packages: firefox...

CVE-2026-45698

Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the deletedir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for pat...

CVE-2026-45698

Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the deletedir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for pat...

CVE-2026-68520

Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, asdictsecure in glances/config.py checks only option names and exposes publicusername and credentials embedded in publicapi values through unauthenticated GET /api/4/config and GET /api/4/config/ip requests. This iss...

389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under memory pressure...

CVE-2026-73646

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.18, lib/previous-map.js loadMap passes attacker-controlled sourceMappingURL values to joindirnameopts.from, annotation, and loadFile permits traversed ...

CVE-2026-75007

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the LDAP search filter was subject to injection via unescaped %u/%fu/%d substitution, which may lead to information disclosure or privilege escalation...

CVE-2026-75006

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, insufficient Cascading Style Sheets CSS sanitization in HTML e-mail messages may lead to SSRF or Information Disclosure, e.g., if stylesheet links point to local network hosts. This issue exists because of insufficient fixes for...

CVE-2026-75004

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper rule name quoting could lead to managesievedisabledactions setting bypass via a crafted rule name in a Sieve script. This issue only affects Roundcube instances using the managesieve plugin...