3431 matches found
GHSA-MM53-X3WX-JGR2 vulnerabilities
Vulnerabilities for packages: busybox...
SUSE CVE-2026-34356
Heap-based Buffer Overflow vulnerability in Apache HTTP Server with malicious backend servers and ProxyPassReverseCookie This issue affects Apache HTTP Server: from 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the issue...
GHSA-VQC8-7275-Q272 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2026-45447
Issue summary: A specially crafted PKCS7 or S/MIME signed message could trigger a use-after-free during PKCS7 signature verification. Impact summary: A use-after-free may result in process crashes, heap corruption, or potentially remote code execution. When processing a PKCS7 or S/MIME signed...
CVE-2026-42766
Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer dereference leads to an application crash and a Denial of Service. The CMS PasswordRecipientInfo.keyDerivationAlgorithm field is define...
CVE-2026-34180
Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitive element whose content exceeds 2 gigabytes in length may cause a heap buffer over-read on 64-bit Unix and Unix-like platforms. Impact summary: The heap buffer over-read may crash the application Denial of Service or to...
GHSA-C4WJ-P3M6-6483 vulnerabilities
Vulnerabilities for packages: binutils...
GHSA-X4GW-5CX5-PGMH vulnerabilities
Vulnerabilities for packages: commercial-elasticsearch, wavefront-proxy, elasticsearch, kayenta-fips, apache-activemq-artemis, flyway, elasticsearch-fips, cassandra-reaper, kayenta, selenium, thingsboard, tez, trino, sonarqube, druid, keycloak-fips, apache-pulsar-fips, kafka-bridge-fips,...
GHSA-J3F5-RW74-G4RV vulnerabilities
Vulnerabilities for packages: gdal...
GHSA-H9RH-5FFH-H669 vulnerabilities
Vulnerabilities for packages: gdal...
CVE-2026-3238
A flaw was found in Samba’s WINS server component when running as an Active Directory Domain Controller. The WINS protocol handlers for certain request types did not properly validate incoming packets, allowing an unauthenticated remote attacker to trigger a NULL pointer dereference and crash the...
SUSE CVE-2026-10943
Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
SUSE CVE-2026-22015
unknown...
[SECURITY] Fedora 44 Update: perl-CryptX-0.089-1.fc44
This Perl library provides a cryptography based on LibTomCrypt library...
CVE-2026-9913 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-9936 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-9939 vulnerabilities
Vulnerabilities for packages: chromium...