5120 matches found
CVE-2026-56378
ImageMagick before 7.1.2-15 and 6.x before 6.9.13-40 contains a heap out-of-bounds read in the PCD coder's DecodeImage loop. A crafted PCD file can trigger a one-byte heap out-of-bounds read during image decoding, resulting in denial of service and potential disclosure of an adjacent heap byte...
[SECURITY] Fedora 43 Update: kubernetes1.35-1.35.6-1.fc43
Production-Grade Container Scheduling and Management. Installs kubelet, the kubernetes agent on each machine in a cluster. The kubernetes-client sub-package, containing kubectl, is recommended but not strictly required. The kubernetes-client sub-package should be installed on control plane machin...
GHSA-CF98-J28V-49V6 vulnerabilities
Vulnerabilities for packages: grafana...
CVE-2026-52908
In the Linux kernel, the following vulnerability has been resolved: RDMA: During reregmr ensure that REREGACCESS is compatible If IBMRREREGACCESS changes from RO to RW then the umem has to be re-evaluated to ensure it is properly pinned as RW. Since the umem is hidden inside each driver's mr stru...
CVE-2026-56131
libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy violation. Thus, a use-after-free can occur similar to the CVE-2026-50219 situation...
dotnet: .NET Core: Denial of Service via type confusion
A flaw was found in .NET Core. This vulnerability, known as type confusion, allows an unauthorized remote attacker to cause a denial of service DoS over a network. By exploiting this flaw, an attacker can make the affected system unavailable to legitimate users...
SUSE CVE-2026-12293
Use-after-free in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 152 and Thunderbird 152...
CVE-2026-47262 affecting package containerd2 for versions less than 2.2.4-3
CVE-2026-47262 affecting package containerd2 for versions less than 2.2.4-3. A patched version of the package is available...
CVE-2026-53488 affecting package containerd2 for versions less than 2.2.4-3
CVE-2026-53488 affecting package containerd2 for versions less than 2.2.4-3. A patched version of the package is available...
GHSA-RP9W-3FW7-7CWQ vulnerabilities
Vulnerabilities for packages: wazuh-dashboard-fips, kibana, wazuh-dashboard, librechat, langfuse, nextcloud-server, langfuse-fips...
GHSA-X4VX-RJVF-J5P4 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard-fips, kibana, wazuh-dashboard, librechat, langfuse, nextcloud-server, langfuse-fips...
GHSA-X4VX-RJVF-J5P4 vulnerabilities
Vulnerabilities for packages: langfuse, nextcloud-server...
CVE-2026-49760 affecting package erlang for versions less than 26.2.5.21-2
CVE-2026-49760 affecting package erlang for versions less than 26.2.5.21-2. A patched version of the package is available...
GHSA-JQ35-7PRP-9V3F vulnerabilities
Vulnerabilities for packages: datadog-agent, kserve, superset, ggshield...
GHSA-5XF4-F2FQ-F69J vulnerabilities
Vulnerabilities for packages: yarn...
GHSA-HPM9-74QX-6X32 vulnerabilities
Vulnerabilities for packages: openjdk...
CVE-2026-22018 vulnerabilities
Vulnerabilities for packages: openjdk...
GHSA-5CCW-23GM-2H2F vulnerabilities
Vulnerabilities for packages: openjdk...
GHSA-HMW2-7CC7-3QXX vulnerabilities
Vulnerabilities for packages: langfuse, lerna, tileserver-gl, jitsucom-jitsu, argo-workflows, kubeflow-pipelines, nextcloud-server, kubeflow-centraldashboard, saf, sqlpad, kubeflow-katib, prism, opensearch-dashboards...