CVE-2026-47753

Incus is a system container and virtual machine manager. Prior to version 7.1.0, backend.CreateInstanceFromBackup in internal/server/storage/backend.go contains a nil-pointer dereference that an authenticated user with permission to create instances in any project can trigger remotely by uploadin...

CVE-2026-48756

Incus is a system container and virtual machine manager. Prior to version 7.1.0, backend.CreateCustomVolumeFromBackup in internal/server/storage/backend.go contains an unguarded time.Time dereference on the ExpiresAt field of every volume-snapshot entry in an imported custom-volume backup. An...

CVE-2026-77806

SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to code injection via an X-Spip-Filtre HTTP request header that is mishandled by analyseresultatskel...

CVE-2026-14456 vulnerabilities

Vulnerabilities for packages: openssl...

SUSE CVE-2026-60589

unknown...

SUSE CVE-2026-61308

unknown...

SUSE CVE-2026-70906

unknown...

SUSE CVE-2026-70907

unknown...

httpd: mod_md: unrestricted OCSP response leads to resource exhaustion

A flaw was found in the modmd module of httpd. When processing OCSP Online Certificate Status Protocol responses from a malicious or compromised OCSP responder, the module fails to enforce proper size limits on the incoming data. This issue leads to memory exhaustion and a denial of service...

UBUNTU-CVE-2026-64846

Nix is a package manager for Linux and other Unix systems. Prior to 2...

Important Photon OS Security Update - PHSA-2026-5.0-92-0969

Updates of 'openssl' packages of Photon OS have been released...

CVE-2026-61711 vulnerabilities

Vulnerabilities for packages: kaniko, guac, conftest, kubescape, podman, scorecard...

CVE-2026-61712 vulnerabilities

Vulnerabilities for packages: kaniko, guac, conftest, kubescape, podman, scorecard...

GHSA-72X6-4J93-7W86 vulnerabilities

Vulnerabilities for packages: kaniko, guac, conftest, kubescape, podman, scorecard...

GO-2026-6093 vulnerabilities

Vulnerabilities for packages: localstack...

CVE-2026-14456 vulnerabilities

Vulnerabilities for packages: libcrypto3-2.34, openssl...

CVE-2026-50190

Shaarli is a personal bookmarking service. Versions prior to 0.16.3 are vulnerable to stored XSS in application/front/controller/visitor/BookmarkListController.php. The permalink handler concatenates the raw $bookmark-getTitle into the pagetitle template variable and the RainTPL template emits it...

CVE-2026-15741 affecting package postgresql for versions less than 16.15-1

CVE-2026-15741 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-14668 affecting package postgresql for versions less than 16.15-1

CVE-2026-14668 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-14664 affecting package postgresql for versions less than 16.15-1

CVE-2026-14664 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...