5131 matches found
CVE-2025-69419
Issue summary: Calling PKCS12getfriendlyname function on a maliciously crafted PKCS12 file with a BMPString UTF-16BE friendly name containing non-ASCII BMP code point can trigger a one byte write before the allocated buffer. Impact summary: The out-of-bounds write can cause a memory corruption...
GHSA-GF89-385C-HQ37 vulnerabilities
Vulnerabilities for packages: py3-pulp...
GHSA-J8H4-V947-5H7Q vulnerabilities
Vulnerabilities for packages: ffmpeg...
firefox: thunderbird: Use-after-free in the JavaScript Engine component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript Engine component...
CVE-2024-3884 vulnerabilities
Vulnerabilities for packages: wildfly...
CVE-2025-12543 vulnerabilities
Vulnerabilities for packages: wildfly...
grafana security update
9.2.10-27.0.1 - Fixes CVE-2024-1442 Add email verification when updating user email Orabug: 38550520 9.2.10-27 - Resolves RHEL-140537: CVE-2025-61729...
CVE-2025-69420
Issue summary: A type confusion vulnerability exists in the TimeStamp Response verification code where an ASN1TYPE union member is accessed without first validating the type, causing an invalid or NULL pointer dereference when processing a malformed TimeStamp Response file. Impact summary: An...
CVE-2025-68618 vulnerabilities
Vulnerabilities for packages: imagemagick...
CVE-2026-1225 vulnerabilities
Vulnerabilities for packages: cassandra, ontop, localstack, nextflow, trino, management-api-for-apache-cassandra-4.0, zookeeper, akhq, apache-nifi-registry, kafbat-ui-fips, nacos, keycloak-config-cli, nacos-docker, ontop-fips, kserve-modelmesh, dependency-track-apiserver, sonar-scanner-cli,...
CVE-2026-1425
A security flaw has been discovered in pymumu SmartDNS up to 47.1. This vulnerability affects the function dnsdecoderrhead/dnsdecodeSVCBHTTPS of the file src/dns.c of the component SVBC Record Parser. The manipulation results in stack-based buffer overflow. It is possible to launch the attack...
CVE-2025-50537
Removed by vendor...
CVE-2026-23011
In the Linux kernel, the following vulnerability has been resolved: ipv4: ipgre: make ipgreheader robust Analog to commit db5b4e39c4e6 "ip6gre: make ip6greheader robust" Over the years, syzbot found many ways to crash the kernel in ipgreheader 1. This involves team or bonding drivers ability to...
CVE-2026-23009
In the Linux kernel, the following vulnerability has been resolved: xhci: sideband: don't dereference freed ring when removing sideband endpoint xhcisidebandremoveendpoint incorrecly assumes that the endpoint is running and has a valid transfer ring. Lianqin reported a crash during suspend/wake-u...
CVE-2026-22998
In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix NULL pointer dereferences in nvmettcpbuildpduiovec Commit efa56305908b "nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length" added ttag bounds checking and dataoffset validation in...
GHSA-GJ5H-7FQ5-56P5 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-aws, linux-gcp, linux-azure, linux-vmware...
GHSA-XCJF-5V2R-GVC9 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-aws, linux-gcp, linux-azure, linux-vmware...
GHSA-4C4X-JM2X-PF9J vulnerabilities
Vulnerabilities for packages: spire-server-fips, gh, kyverno-policy-reporter-plugins-kyverno-fips, tekton-chains, kyverno-policy-reporter-plugins-kyverno, kyverno-notation-aws, policy-controller, buildkitd-fips, flux-source-controller-fips, ko-fips, image-factory, chainctl, cosign, teleport,...
CVE-2026-22993
In the Linux kernel, the following vulnerability has been resolved: idpf: Fix RSS LUT NULL ptr issue after soft reset During soft reset, the RSS LUT is freed and not restored unless the interface is up. If an ethtool command that accesses the rss lut is attempted immediately after reset, it will...
