CVE-2026-76889

UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76921

CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76927

H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76879

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-63335 vulnerabilities

Vulnerabilities for packages: logstash-fips, cassandra-reaper, zipkin, conductor, druid, thingsboard, nuxeo, conductor-fips, logstash...

[SECURITY] Fedora 43 Update: perl-List-SomeUtils-XS-0.59-1.fc43

List::SomeUtils provides some trivial but commonly needed functionality on lists which is not going to go into List::Util. XS implementation is faster than List::SomeUtils...

CVE-2026-53533

aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.1, SMTP.mail, SMTP.rcpt, SMTP.vrfy, and SMTP.expn send caller-supplied addresses without rejecting embedded CR or LF bytes. Data after the line break is framed as additional standalone SMTP command lines, allowing an...

CVE-2026-74989

Internally found bugs present in Thunderbird 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 154 and Thunderbird 154...

CVE-2026-75838

DOMPurify before 3.4.13 contains a cross-site scripting vulnerability in INPLACE sanitization where element-removal hooks fail to neutralize detached subtrees. Attackers can supply HTML with event handlers on descendant elements that execute after sanitization completes, even though the returned...

SUSE CVE-2026-62900

unknown...

GO-2026-5247 vulnerabilities

Vulnerabilities for packages: splunk-otel-collector, splunk-otel-collector-fips, vault-fips, vault...

GO-2024-2697 vulnerabilities

Vulnerabilities for packages: grafana-fips...

GO-2026-5378 vulnerabilities

Vulnerabilities for packages: rancher-agent, cluster-api-helm-controller, k8sgpt, osv-scanner, rancher-helm, manifest-tool, redpanda-operator, neuvector, kubescape-server-fips, cloudbeat-fips, fuse-overlayfs-snapshotter, trivy-operator-fips, cloudbeat, consul-k8s, trivy-operator, gatekeeper, helm...

GO-2025-3409 vulnerabilities

Vulnerabilities for packages: zot...

GO-2025-3533 vulnerabilities

Vulnerabilities for packages: nuclei, timoni, gptscript, dataplaneapi...

.NET: .NET Information Disclosure Vulnerability

Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...

.NET: .NET Elevation of Privilege Vulnerability

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

GHSA-Q7V3-32HW-67W6 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-70354

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...

firefox: thunderbird: Site isolation issue in the Graphics: WebRender component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Graphics: WebRender component...