5122 matches found
ROS-20260615-73-0036
The vulnerability of the RDP client FreeRDP relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and accessibility of protected information...
ROS-20260615-73-0010
The vulnerability of the RDP client FreeRDP is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
ROS-20260615-73-0034
The vulnerability of the freerdpbitmapdecompressplanar function in the RDP client FreeRDP is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
CVE-2026-43958 affecting package rrdtool for versions less than 1.8.0-3
CVE-2026-43958 affecting package rrdtool for versions less than 1.8.0-3. A patched version of the package is available...
CVE-2026-47162 affecting package vim for versions less than 9.2.0620-1
CVE-2026-47162 affecting package vim for versions less than 9.2.0620-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-5223 affecting package rust for versions less than 1.90.0-9
CVE-2026-5223 affecting package rust for versions less than 1.90.0-9. A patched version of the package is available...
GHSA-4H64-69GW-4PGG vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-48022 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, kibana, opensearch-dashboards...
GHSA-H2QV-FJ59-J46J vulnerabilities
Vulnerabilities for packages: thingsboard, tez, apache-hop-fips, pinot-fips, apache-pulsar, keycloak-fips, request-9047-keycloak-fips, knative-kafka-broker-fips, pinot, celeborn, seata, apache-pulsar-fips, hono, management-api-for-apache-cassandra-5.0, apache-activemq-artemis, apache-hop,...
CVE-2026-54057
Kitty is a cross-platform GPU based terminal. In versions prior to 0.47.3, kitty's OSC 21 color-control query reply reflects attacker-controlled bytes, including newlines, into the shell's input without sanitization. Version 0.47.3 fixes the issue...
CVE-2026-9638
Crypt::PBKDF2 versions before 0.261630 for Perl generate insecure random values for salts. These versions use the built-in rand function, which is predictable and unsuitable for cryptography...
CVE-2026-48006
Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, the RedisArrayAggregator handler permanently leaks pooled direct-memory buffers when a Redis pipeline connection closes before a RESP array aggregate...
CVE-2026-46340
Netty is a network application framework for development of protocol servers and clients. In versions of netty-transport-sctp prior to 4.1.135.Final and 4.2.15.Final, for each non-complete SctpMessage fragment the handler does fragments.putstreamId, Unpooled.wrappedBufferfrag, byteBuf, wrapping t...
CVE-2026-45416
Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, SslClientHelloHandler.decode reads the 24-bit TLS handshake length and, when the ClientHello does not fit in the first record, eagerly allocates...
GHSA-5375-PQ7M-F5R2 vulnerabilities
Vulnerabilities for packages: kibana, langfuse-fips, jitsucom-jitsu, langfuse, pulumi, cadence-web, gemini-cli, opentelemetry-auto-instrumentations-node...
GHSA-CXH2-4639-VMC5 vulnerabilities
Vulnerabilities for packages: kube-logging-operator-fips, kube-logging-operator...
GHSA-6MR8-WMR4-CH9V vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-282G-W5FH-9Q49 vulnerabilities
Vulnerabilities for packages: chromium...