592 matches found
GHSA-FJJ2-X466-W3HX vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-workhorse-ce, gitlab-workhorse-ce-fips...
CVE-2025-10868 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-workhorse-ce, gitlab-workhorse-ce-fips...
curl: libcurl: Curl out of bounds read for cookie path
An out of bounds read flaw has been discovered in the curl project. Under specific conditions the path comparison logic makes curl read outside a heap buffer boundary. This bug either causes a crash or it potentially makes the comparison come to the wrong conclusion and lets the clear-text site...
GHSA-HG6J-8H7M-3W3J vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2026-23553
In the context switch logic Xen attempts to skip an IBPB in the case of a vCPU returning to a CPU on which it was the previous vCPU to run. While safe for Xen's isolation between vCPUs, this prevents the guest kernel correctly isolating between tasks. Consider: 1 vCPU runs on CPU A, running task ...
ROS-20260128-73-0059
Vulnerability in kernel-lt related to synchronization errors when using a shared resource. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
php: PHP Hostname Null Character Vulnerability
A flaw was found in PHP. The fsockopen function and related functions fail to validate NULL characters within the provided hostname, potentially leading to unexpected behavior during parsing. This flaw allows a network attacker to supply a specially crafted hostname. This issue can result in a...
CVE-2025-68160
Issue summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes can trigger a heap-based out-of-bounds write. Impact summary: This out-of-bounds write can cause memory corruption which typically results in a crash, leading ...
CVE-2026-0775
npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of npm cli. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploi...
ROS-20260122-73-0009
Vulnerability in ceph related to insufficient input validation. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...
GHSA-9XFG-6WHQ-QVGM vulnerabilities
Vulnerabilities for packages: drupal...
GHSA-4X76-2J9H-Q9R9 vulnerabilities
Vulnerabilities for packages: redis...
GHSA-433R-68JW-R53J vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-vmware, linux-aws, linux-gcp, linux-azure...
CVE-2020-36843 affecting package ed25519-java for versions less than 0.3.0-1
CVE-2020-36843 affecting package ed25519-java for versions less than 0.3.0-1. A patched version of the package is available...
wireshark: Access of Uninitialized Pointer in Wireshark
An uninitialized pointer access has been discovered in Wireshark. An attacker who can provide crafted input may be able to leverage this pointer access weakness to crash the application...
mariadb: MariaDB Server Crash
A flaw was found in MariaDB Server. This vulnerability may allow an attacker to cause a crash via improper handling of join operations in JOIN::fixallsplittingsinplan...
GHSA-G84X-MCQJ-X9QQ vulnerabilities
Vulnerabilities for packages: kserve, airflow, open-webui, py3.13-scanner-test-libraries-aiohttp, request-1276, checkov, dask-kubernetes, kubeflow-pipelines-visualization-server, py3-cassandra-medusa, awx, gitlab-cng, py3-vllm-cuda-12.4, apache-beam-python-3.11-sdk, authentik...
GHSA-7MVR-5X2G-WFC8 vulnerabilities
Vulnerabilities for packages: grafana...