5641 matches found
ROS-20260512-73-0010
Vulnerability in beats related to reading beyond buffer boundaries in memory. Exploitation of the vulnerability may allow an attacker to cause a denial of service...
ROS-20260512-73-0016
A vulnerability in the Core component of Oracle VM VirtualBox virtual machine is related to insufficient input validation. Exploitation of the vulnerability could allow an attacker to gain full control over the application...
ROS-20260512-73-0030
A vulnerability in the Core component of Oracle VM VirtualBox virtual machine is related to insufficient input validation. Exploitation of the vulnerability could allow an attacker to gain full control over the application...
ROS-20260512-73-0027
A vulnerability in the Core component of the Oracle VM VirtualBox virtual machine is related to insufficient input validation. Exploitation of the vulnerability could allow an attacker to gain full control over the application...
ROS-20260512-73-0024
A vulnerability in the Core component of Oracle VM VirtualBox virtual machine is related to insufficient input validation. Exploitation of the vulnerability could allow an attacker to gain full control over the application...
ROS-20260512-73-0020
A vulnerability in the Core component of the Oracle VM VirtualBox virtual machine is related to insufficient input validation. Exploitation of the vulnerability could allow an attacker to gain full control over the application...
CVE-2026-32175
A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could write arbitrary files and directories to certain locations on a vulnerable system. However, an attacker would have limited control over the...
CVE-2026-35433
Improper input validation in .NET allows an unauthorized attacker to elevate privileges locally...
ROS-20260512-73-0011
Vulnerability in hdf5 related to memory usage after memory release. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...
crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...
webkitgtk: Processing maliciously crafted web content may lead to an unexpected process crash
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling...
webkitgtk: A malicious website may be able to process restricted web content outside the sandbox
A flaw was found in WebKitGTK. A maliciously crafted web page may be able to process restricted web content outside the sandbox due to improper memory handling...
CVE-2026-43895
jq is a command-line JSON processor. In 1.8.1 and earlier, jq accepts embedded NUL bytes in import paths at the jq-language level, but later resolves those paths through C string operations during module and data-file lookup. This creates a mismatch between the logical import string that policy o...
CVE-2026-2291
dnsmasqs extractname function can be abused to cause a heap buffer overflow, allowing an attacker to inject false DNS cache entries, which could result in DNS lookups to redirect to an attacker-controlled IP address, or to cause a DoS...
CVE-2026-5172
A buffer overflow in dnsmasq’s extractaddresses function allows an attacker to trigger a heap out-of-bounds read and crash by exploiting a malformed DNS response, enabling extractname to advance the pointer past the record’s end...
GHSA-7PWC-H2J2-RJGJ vulnerabilities
Vulnerabilities for packages: spark, zipkin, wavefront-proxy...
GHSA-HM8Q-7F3Q-5F36 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, langfuse, langfuse-fips, wazuh-dashboard, librechat, kibana, wazuh-dashboard-fips, commercial-gitlab-rails-ee, commercial-gitlab-rails-ee-fips, opensearch-dashboards...
GHSA-QP7P-654G-CW7P vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, langfuse, langfuse-fips, wazuh-dashboard, librechat, kibana, wazuh-dashboard-fips, commercial-gitlab-rails-ee, commercial-gitlab-rails-ee-fips, opensearch-dashboards...
CVE-2026-44458 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, langfuse, langfuse-fips, wazuh-dashboard, librechat, kibana, wazuh-dashboard-fips, commercial-gitlab-rails-ee, commercial-gitlab-rails-ee-fips, opensearch-dashboards...