592 matches found
ROS-20260701-73-0040
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
GHSA-Q9J8-24P8-JQ8J vulnerabilities
Vulnerabilities for packages: gitlab-runner...
mariadb: MariaDB: Privilege bypass allows unauthorized file write via subqueries
A flaw was found in MariaDB server. This vulnerability allows a low-privileged authenticated user to bypass a security control that normally restricts file operations. Specifically, the system failed to verify the necessary 'FILE' privilege when certain 'SELECT' statements, which write data to...
GHSA-4MR2-FG2P-W63C vulnerabilities
Vulnerabilities for packages: traefik-fips, traefik...
GHSA-3M6Q-JJ5J-38C9 vulnerabilities
Vulnerabilities for packages: ruby3.3-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset...
CVE-2026-6092
When HAVEENCRYPTTHENMAC is configured, the implementation could fall back to MAC-then-Encrypt rather than enforcing Encrypt-then-MAC...
CVE-2026-6092
When HAVEENCRYPTTHENMAC is configured, the implementation could fall back to MAC-then-Encrypt rather than enforcing Encrypt-then-MAC...
CVE-2026-53225
In the Linux kernel, the following vulnerability has been resolved: sctp: fix uninit-value in sctprcvasconflookup sctprcvasconflookup in net/sctp/input.c only checks that the ASCONF chunk can hold the ADDIP header and a parameter header, then calls af-fromaddrparam, which reads the full address 1...
CVE-2026-53197
In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix ABBA deadlock in iptfsdestroystate iptfsdestroystate calls hrtimercancel while holding a spinlock that the timer callback also acquires, leading to an ABBA deadlock on SMP systems. For the output timer iptfstimer...
CVE-2026-12246
NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will overwrite the stack when the zone is written to disk, with a maximum of 111 attacker controlled bytes...
CVE-2026-54516 vulnerabilities
Vulnerabilities for packages: confluent-kafka-jre-bcfips, pinot-fips, apache-tomee, dependency-track, keycloak-config-cli, scala, spdx-tools-java, geoserver, opensearch-fips, ruby3.4-jrjackson, apicurio-registry, jenkins-plugin-manager, cassandra, kafbat-ui, logstash-fips, nacos-docker, nuxeo,...
CVE-2025-62879 vulnerabilities
Vulnerabilities for packages: backup-restore-operator-fips, backup-restore-operator...
GHSA-FCW5-X6J4-CCMP vulnerabilities
Vulnerabilities for packages: tensorflow-cpu-jupyter...
GHSA-WXV8-W48J-R2F4 vulnerabilities
Vulnerabilities for packages: python...
ROS-20260617-73-0007
The vulnerability in ImageMagick is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...
GHSA-4FVR-RGM6-GQMC vulnerabilities
Vulnerabilities for packages: lmcache-cuda-12.8, py3-vllm-cuda-13.0, py3.13-scanner-test-libraries-aiohttp, airflow-core, apache-beam-python-3.12-sdk, mlflow, metaflow-service-fips, authentik-fips, open-webui, apache-beam-python-3.13-sdk, dask-kubernetes-fips, text-generation-inference, authentik...
GHSA-4M7W-QMGQ-4WJ5 vulnerabilities
Vulnerabilities for packages: lmcache-cuda-12.8, py3-vllm-cuda-13.0, py3.13-scanner-test-libraries-aiohttp, airflow-core, apache-beam-python-3.12-sdk, mlflow, metaflow-service-fips, authentik-fips, open-webui, apache-beam-python-3.13-sdk, dask-kubernetes-fips, text-generation-inference, authentik...
python-idna: idna: Denial of Service via specially crafted long inputs
A flaw was found in the idna library, which handles Internationalized Domain Names in Python applications. A remote attacker could exploit this vulnerability by sending specially crafted, excessively long inputs to the library's encoding function. This could cause the system to consume significan...
