592 matches found
CVE-2025-14505 vulnerabilities
Vulnerabilities for packages: librechat, opensearch-dashboards-fips, opensearch-dashboards...
freerdp: FreeRDP: Arbitrary code execution and denial of service via malicious server
A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. A malicious server can exploit a use-after-free vulnerability by enticing a client to connect to it. This can lead to a client-side crash, resulting in a Denial of Service DoS, and potentially allow for arbitrary...
fontforge: FontForge: Arbitrary code execution via SFD file parsing buffer overflow
A flaw was found in FontForge. A remote attacker could exploit a heap-based buffer overflow vulnerability during SFD file parsing. This issue arises from insufficient validation of user-supplied data length before copying it to a buffer. Successful exploitation requires user interaction, such as...
GHSA-PQXR-3G65-P328 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
CVE-2025-38022 affecting package kernel for versions less than 6.6.121.1-1
CVE-2025-38022 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...
CVE-2026-2241
A vulnerability was found in janet-lang janet up to 1.40.1. This affects the function osstrftime of the file src/core/os.c. Performing a manipulation results in out-of-bounds read. The attack must be initiated from a local position. The exploit has been made public and could be used. The patch is...
CVE-2025-11961 affecting package nmap for versions less than 7.93-4
CVE-2025-11961 affecting package nmap for versions less than 7.93-4. A patched version of the package is available...
GHSA-6WQW-2P9W-4VW4 vulnerabilities
Vulnerabilities for packages: librechat, langfuse, langfuse-fips...
GHSA-J39J-6GW9-JW6H vulnerabilities
Vulnerabilities for packages: sentry-cli, convco, zed, bat, berg, eza, nushell...
GHSA-4RRR-2H4V-F3J9 vulnerabilities
Vulnerabilities for packages: awx, authentik, authentik-fips, label-studio...
GHSA-R2RJ-WWM5-X6MQ vulnerabilities
Vulnerabilities for packages: kyverno-notation-aws...
CVE-2026-1285
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. django.utils.text.Truncator.chars and Truncator.words methods with html=True and the truncatecharshtml and truncatewordshtml template filters allow a remote attacker to cause a potential denial-of-service via...
CVE-2025-61636
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/htmlform/fields/HTMLButtonField.Php. This issue affects MediaWiki: from before 1.39.14, 1.43.4,...
GHSA-7W66-J2R2-VM3P vulnerabilities
Vulnerabilities for packages: kubernetes...
GHSA-3CMH-PCXH-6V9P vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-vmware, linux-aws, linux-gcp, linux-azure...
CVE-2026-0994 vulnerabilities
Vulnerabilities for packages: py3-protobuf, nemo, vllm-openai-cuda-12.9, py3-vllm-cuda-12.4, tritonserver-backend-vllm-cuda-12.9, kubeflow-katib, text-generation-inference, authentik, azure-functions-python-worker, authentik-fips, dbt-bigquery, open-webui, airflow, ghidra, localstack,...
CVE-2023-51797 vulnerabilities
Vulnerabilities for packages: ffmpeg...
CVE-2025-61728
archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a maliciously constructed ZIP archive...