4982 matches found
GHSA-RWJ8-PGH3-R573 vulnerabilities
Vulnerabilities for packages: checkov, mlflow...
Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize
A flaw was found in Little CMS. An integer overflow in the CubeSize function within cmslut.c occurs because the overflow check is performed after the multiplication. An attacker could exploit this vulnerability by providing a specially crafted input, potentially leading to information disclosure ...
[SECURITY] Fedora 44 Update: nginx-mod-brotli-1.0.0~rc-13.fc44
NGINX module for Brotli compression...
CVE-2026-60081 affecting package perl-DBI for versions less than 1.651-1
CVE-2026-60081 affecting package perl-DBI for versions less than 1.651-1. An upgraded version of the package is available that resolves this issue...
GHSA-4J6X-2764-M8GH vulnerabilities
Vulnerabilities for packages: harvester, harvester-fips...
GHSA-VX8H-4PRV-G744 vulnerabilities
Vulnerabilities for packages: harvester, harvester-fips...
CVE-2026-59869 vulnerabilities
Vulnerabilities for packages: prism, lerna, pulumi, kubeflow-centraldashboard, eslint, opensearch-dashboards, sqlpad, vitess, code-server, ts-patch...
GHSA-52CP-R559-CP3M vulnerabilities
Vulnerabilities for packages: prism, lerna, pulumi, kubeflow-centraldashboard, eslint, opensearch-dashboards, sqlpad, vitess, code-server, ts-patch...
GHSA-H95V-H523-3MW8 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2026-64831
FFmpeg versions 8.0 through 8.1.2 contains a stack buffer overflow vulnerability in the Vulkan HEVC hardware decoder that allows remote attackers to overwrite return addresses and adjacent stack frames by supplying a crafted HEVC/H.265 bitstream. Attackers can embed a malicious vpsnumhrdparameter...
CVE-2026-55717
In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, when 'serve-expired: yes' is set together with a 'response-ip: redirect' /'response-ip-data: CNAME ' rule or the RPZ 'rpz-cname-override' equivalent, a remote client who controls any delegated domain can crash the daemon. The...
GHSA-XJ96-63GP-2GMR vulnerabilities
Vulnerabilities for packages: label-studio, openstack-horizon-2026.1-fips, openstack-horizon-2025.2-fips, openstack-horizon-2026.1, text-generation-inference, open-webui, mlflow, superset, openstack-horizon-2025.2, tensorflow-gpu-jupyter...
GHSA-PMV8-RQ9R-6J72 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, wazuh-dashboard, langfuse-fips, redisinsight, kibana, awx, opensearch-dashboards-fips, prism, wazuh-dashboard-fips, semaphore, langfuse, opensearch-dashboards, librechat, kubeflow-centraldashboard, nextcloud-server, lerna...
GHSA-HCPX-6FM6-WX23 vulnerabilities
Vulnerabilities for packages: nextcloud-server, langfuse, prism, lerna, kubeflow-centraldashboard, opensearch-dashboards, jitsucom-jitsu...
SUSE CVE-2026-16364
Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
SUSE CVE-2026-16403
Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
SUSE CVE-2026-16410
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
GHSA-WM3W-8RRP-J577 vulnerabilities
Vulnerabilities for packages: drupal, nextcloud-server, privatebin...