595 matches found
GHSA-G3R4-PHHF-PX98 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-3Q78-FQJ5-G3MC vulnerabilities
Vulnerabilities for packages: bouncycastle-fips...
CVE-2026-59881 vulnerabilities
Vulnerabilities for packages: apache-beam-python-3.11-sdk, lmcache-cuda-12.8, dask-kubernetes, airflow-core, airflow, datahub-ingestion-fips, tritonserver-backend-vllm-cuda-13.0, py3-vllm-cuda-12.4, apache-beam-python-3.13-sdk, py3-cassandra-medusa, open-webui, awx, text-generation-inference,...
GHSA-MFX4-HV73-Q22V vulnerabilities
Vulnerabilities for packages: apache-beam-python-3.11-sdk, lmcache-cuda-12.8, dask-kubernetes, airflow-core, airflow, datahub-ingestion-fips, tritonserver-backend-vllm-cuda-13.0, py3-vllm-cuda-12.4, apache-beam-python-3.13-sdk, py3-cassandra-medusa, open-webui, awx, text-generation-inference,...
GHSA-32RQ-JHR7-M3HH vulnerabilities
Vulnerabilities for packages: nextcloud-server...
GHSA-88FW-V6X4-3F58 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
CVE-2026-67289
FreeRDP before 3.29.0 affected versions = 3.28.0 does not validate CRLF and control characters in the server-controlled RDP redirection TargetNetAddress field. This value is copied into the client's ServerHostname and, when the client connects through an HTTP proxy, is written directly into the...
CVE-2026-41607 affecting package thrift for versions less than 0.24.0-1
CVE-2026-41607 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...
GHSA-3CHG-M5W7-QFV5 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
SUSE CVE-2026-18001
Inappropriate implementation in WebGL in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...
GHSA-3FXJ-6JH8-HVHX vulnerabilities
Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, telegraf, fluxcd-kustomize-mutating-webhook-fips, karma, karma-fips, cosmo-router-fips, zitadel, cosmo-router...
CVE-2026-64308
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctlSNPVLEKLOAD Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEVPDHGEN and...
GHSA-2X63-GW47-W4MM vulnerabilities
Vulnerabilities for packages: pghero, gitlab-rails-ce-fips, gitlab-rails-ce, ruby4.0-rails, pghero-fips...
ROS-20260724-73-0017
The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...
ROS-20260724-73-0039
The vulnerability in ImageMagick is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-65901
DOMPurify through 3.4.6 contains a cross-site scripting vulnerability in INPLACE mode that trusts attacker-controlled nodeName on live non-form nodes. Attackers can supply hostile live DOM objects with real script children whose observable nodeName is clobbered to appear as allowed elements,...
bind: bind9: Unnecessary validation of DNSSEC signed records
The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records in an answer, even if they are not strictly needed. A query to an authoritative server/zone which returns many valid but superfluous RRSIG records causes the validator to...
CVE-2026-16409
Invalid pointer in the Security: PSM component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...