5641 matches found
CVE-2026-33033
An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. MultiPartParser allows remote attackers to degrade performance by submitting multipart uploads with Content-Transfer-Encoding: base64 including excessive whitespace. Earlier, unsupported Django series such as...
GHSA-Q6VJ-WXVF-5M8C vulnerabilities
Vulnerabilities for packages: openexr...
CVE-2026-5734
Memory safety bugs present in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was...
GHSA-F2G3-HH2R-CWGC vulnerabilities
Vulnerabilities for packages: zot, envoy-gateway, kots, gitness, portieris, argocd-image-updater...
GHSA-3P65-76G6-3W7R vulnerabilities
Vulnerabilities for packages: envoy-gateway, portieris-fips, argocd-image-updater-fips, gitlab-rails-ce, gitlab-rails-ce-fips, kots, portieris, gitness, envoy-gateway-fips, zot, argocd-image-updater...
GHSA-MWH4-6H8G-PG8W vulnerabilities
Vulnerabilities for packages: py3-cassandra-medusa, kserve, open-webui, airflow, dask-kubernetes, kubeflow-pipelines-visualization-server, checkov...
CVE-2026-28389
Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resulting in Denial of...
CVE-2026-31790
Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer. Impact summary: The uninitialized buffer might contain sensitive data from the previous execution of the application process whi...
CVE-2025-0838 affecting package mysql for versions less than 8.0.45-2
CVE-2025-0838 affecting package mysql for versions less than 8.0.45-2. A patched version of the package is available...
CVE-2026-2443 affecting package libsoup for versions less than 3.4.4-14
CVE-2026-2443 affecting package libsoup for versions less than 3.4.4-14. A patched version of the package is available...
CVE-2026-3119 affecting package bind for versions less than 9.20.21-1
CVE-2026-3119 affecting package bind for versions less than 9.20.21-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-33055 affecting package trident for versions less than 0.22.0-1
CVE-2026-33055 affecting package trident for versions less than 0.22.0-1. A patched version of the package is available...
CVE-2026-25541 affecting package trident for versions less than 0.22.0-1
CVE-2026-25541 affecting package trident for versions less than 0.22.0-1. A patched version of the package is available...
CVE-2025-71161 affecting package kernel for versions less than 6.6.130.1-3
CVE-2025-71161 affecting package kernel for versions less than 6.6.130.1-3. A patched version of the package is available...
CVE-2026-34826 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, gitlab-cng, kube-fluentd-operator, ruby3.2-rack, ruby3.3-rack, gitlab-rails-ce-fips, ruby4.0-rack, pact-broker-docker, ruby3.2-rails, ruby3.4-rails, ruby3.4-rack, pact-broker-docker-fips, logstash...
CVE-2026-34786 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, gitlab-cng, kube-fluentd-operator, ruby3.2-rack, ruby3.3-rack, gitlab-rails-ce-fips, ruby4.0-rack, pact-broker-docker, ruby3.2-rails, ruby3.4-rails, ruby3.4-rack, pact-broker-docker-fips, logstash...
CVE-2019-25656
R i386 3.5.0 contains a local buffer overflow vulnerability in the GUI Preferences dialog that allows local attackers to trigger a structured exception handler SEH overwrite by supplying malicious input. Attackers can craft a payload string in the 'Language for menus and messages' field to...
GHSA-XPG8-3HHP-P7W8 vulnerabilities
Vulnerabilities for packages: temporal, temporal-fips...