CVE-2026-48750

Incus is a system container and virtual machine manager. Prior to version 7.2.0, the record-output parameter of the /instances/$name/exec endpoint stores the output of the command in the exec-output directory of the instance. If exec-output is a symlink, file named execUUID.stdout and...

GHSA-J2G6-362Q-6QC6 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-gcp, velero-plugin-for-microsoft-azure-fips, velero-plugin-for-aws-fips, velero-plugin-for-aws, velero-plugin-for-gcp-fips, velero-plugin-for-microsoft-azure...

CVE-2026-32637 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-gcp, velero-plugin-for-microsoft-azure-fips, velero-plugin-for-aws-fips, velero-plugin-for-aws, velero-plugin-for-gcp-fips, velero-plugin-for-microsoft-azure...

CVE-2026-48749

Incus is a system container and virtual machine manager. Prior to version 7.2.0, a specially crafted image can be used to read or create/write arbitrary files on the host; possibly leading to arbitrary command execution. Version 7.2.0 fixes the issue...

CVE-2026-45404 vulnerabilities

Vulnerabilities for packages: tempo-fips, pulumi-language-yaml, thanos, cortex, cortex-geomys-fips, thanos-fips, cortex-fips...

GHSA-42CJ-99W8-CP2P vulnerabilities

Vulnerabilities for packages: tempo-fips, pulumi-language-yaml, thanos, cortex, cortex-geomys-fips, thanos-fips, cortex-fips...

CVE-2026-32637 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-aws, velero-plugin-for-microsoft-azure...

GHSA-J2G6-362Q-6QC6 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-aws, velero-plugin-for-microsoft-azure...

GHSA-42CJ-99W8-CP2P vulnerabilities

Vulnerabilities for packages: thanos, cortex, pulumi-language-yaml...

CVE-2026-45404 vulnerabilities

Vulnerabilities for packages: thanos, cortex, pulumi-language-yaml...

CVE-2026-47753

Incus is a system container and virtual machine manager. Prior to version 7.1.0, backend.CreateInstanceFromBackup in internal/server/storage/backend.go contains a nil-pointer dereference that an authenticated user with permission to create instances in any project can trigger remotely by uploadin...

CVE-2026-48756

Incus is a system container and virtual machine manager. Prior to version 7.1.0, backend.CreateCustomVolumeFromBackup in internal/server/storage/backend.go contains an unguarded time.Time dereference on the ExpiresAt field of every volume-snapshot entry in an imported custom-volume backup. An...

CVE-2026-77806

SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to code injection via an X-Spip-Filtre HTTP request header that is mishandled by analyseresultatskel...

viper

This repository is archived and development of Viper 1.x is discontinued. A full refactor of the project started withViper 2. Viper is a binary analysis and management framework. Its fundamental objective is to provide a solution to easily organize your collection of malware and exploit samples a...

CVE-2026-14456 vulnerabilities

Vulnerabilities for packages: openssl...

SUSE CVE-2026-60589

unknown...

SUSE CVE-2026-61308

unknown...

SUSE CVE-2026-70906

unknown...

SUSE CVE-2026-70907

unknown...

httpd: mod_md: unrestricted OCSP response leads to resource exhaustion

A flaw was found in the modmd module of httpd. When processing OCSP Online Certificate Status Protocol responses from a malicious or compromised OCSP responder, the module fails to enforce proper size limits on the incoming data. This issue leads to memory exhaustion and a denial of service...