177000 matches found
CVE-2026-61712 vulnerabilities
Vulnerabilities for packages: cloudbeat, cloudbeat-fips, kaniko-fips, podman-fips, guac, kubescape-server-fips, conftest-fips, kubescape, kaniko, kubescape-server, livekit-cli, skaffold-fips, conftest, scorecard, trivy-operator-fips, podman...
GO-2026-4950 vulnerabilities
Vulnerabilities for packages: dapr...
CVE-2026-77014
A flaw was found in libsoup's SoupServer HTTP Range header processing. The sortranges comparator in soup-message-headers.c truncates a 64-bit subtraction result to 32-bit int, flipping the sign for range offsets differing by more than INTMAX. This causes silent omission of requested byte ranges...
webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data
A flaw was found in WebKitGTK. A malicious website can silently hijack clipboard data due to improper state management...
webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information
A flaw was found in WebKitGTK. Processing maliciously crafted web content can disclose sensitive user information due to a path handling issue that was addressed with improved validation...
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash
A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, resulting in an unexpected process crash...
webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox
A flaw was found in WebKitGTK. A malicious website can process restricted web content outside the sandbox due to improper checks, potentially allowing access to resources that should be restricted...
webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption
A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a type confusion due to improper checks, leading to memory corruption...
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash
A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, resulting in an unexpected process crash...
CVE-2026-76957
libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is similar to CVE-2026-50219, CVE-2026-56131 and CVE-2026-56412...
CVE-2026-76956
In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted XML content...
kernel: smb: client: mask server-provided mode to 07777 in modefromsid
A flaw was found in the Linux kernel's Server Message Block SMB client. When processing server-provided file mode information, the system incorrectly applies these modes without proper security masking. This can result in unintended file permissions, potentially allowing unauthorized access to...
refreshing-mcp-tool
Questo non è ancora del tutto finito o pronto, ma volevo mettere il codice nel repository. Implementa sostanzialmente il protocollo di database di F5, "mcp", che opera tramite un socket UNIX domain. Ciò significa che serve una shell sul dispositivo F5 prima di poter usare uno qualsiasi di questi...
GO-2026-6183 vulnerabilities
Vulnerabilities for packages: telegraf...
GO-2026-6185 vulnerabilities
Vulnerabilities for packages: telegraf...
GO-2026-6188 vulnerabilities
Vulnerabilities for packages: telegraf...
GO-2026-6190 vulnerabilities
Vulnerabilities for packages: telegraf...
GO-2026-6189 vulnerabilities
Vulnerabilities for packages: telegraf...