177146 matches found
CVE-2026-73251
Mongoose is an embedded web server and network library. Prior to 7.23, a network attacker can impersonate a TLS server to a Mongoose client configured with a multi-certificate CA bundle. In src/tlsbuiltin.c, the mgtlsinit function stores the bundle in tls-cabundleder while tls-cader.len remains...
CVE-2026-18299
GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on t...
GHSA-72X6-4J93-7W86 vulnerabilities
Vulnerabilities for packages: conftest-fips, kubescape-server-fips, cloudbeat, cloudbeat-fips, livekit-cli, scorecard, guac, kubescape, podman-fips, kaniko-fips, kubescape-server, skaffold-fips, trivy-operator-fips, conftest, kaniko, podman...
GHSA-7236-3392-C5C6 vulnerabilities
Vulnerabilities for packages: conftest-fips, kubescape-server-fips, cloudbeat, cloudbeat-fips, livekit-cli, scorecard, guac, kubescape, podman-fips, kaniko-fips, kubescape-server, skaffold-fips, trivy-operator-fips, conftest, kaniko, podman...
CVE-2026-61711 vulnerabilities
Vulnerabilities for packages: conftest-fips, kubescape-server-fips, cloudbeat, cloudbeat-fips, livekit-cli, scorecard, guac, kubescape, podman-fips, kaniko-fips, kubescape-server, skaffold-fips, trivy-operator-fips, conftest, kaniko, podman...
CVE-2026-61712 vulnerabilities
Vulnerabilities for packages: conftest-fips, kubescape-server-fips, cloudbeat, cloudbeat-fips, livekit-cli, scorecard, guac, kubescape, podman-fips, kaniko-fips, kubescape-server, skaffold-fips, trivy-operator-fips, conftest, kaniko, podman...
GO-2026-4950 vulnerabilities
Vulnerabilities for packages: dapr...
CVE-2026-77014
A flaw was found in libsoup's SoupServer HTTP Range header processing. The sortranges comparator in soup-message-headers.c truncates a 64-bit subtraction result to 32-bit int, flipping the sign for range offsets differing by more than INTMAX. This causes silent omission of requested byte ranges...
webkitgtk: webkitgtk: Maliciously crafted web content may disclose sensitive user information
A flaw was found in WebKitGTK. Processing maliciously crafted web content can disclose sensitive user information due to a path handling issue that was addressed with improved validation...
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash
A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, resulting in an unexpected process crash...
webkitgtk: webkitgtk: A malicious website may silently hijack clipboard data
A flaw was found in WebKitGTK. A malicious website can silently hijack clipboard data due to improper state management...
webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox
A flaw was found in WebKitGTK. A malicious website can process restricted web content outside the sandbox due to improper checks, potentially allowing access to resources that should be restricted...
webkitgtk: webkitgtk: Maliciously crafted web content may lead to memory corruption
A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a type confusion due to improper checks, leading to memory corruption...
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash
A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, resulting in an unexpected process crash...
CVE-2026-76957
libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is similar to CVE-2026-50219, CVE-2026-56131 and CVE-2026-56412...
CVE-2026-76956
In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted XML content...
kernel: smb: client: mask server-provided mode to 07777 in modefromsid
A flaw was found in the Linux kernel's Server Message Block SMB client. When processing server-provided file mode information, the system incorrectly applies these modes without proper security masking. This can result in unintended file permissions, potentially allowing unauthorized access to...
GO-2026-6183 vulnerabilities
Vulnerabilities for packages: telegraf...