3407 matches found
PHP: PHP: Denial of Service via improper handling of signed characters in ctype functions
A flaw was found in PHP. Some functions, including urldecode, incorrectly pass signed characters to character type ctype functions. On certain systems, this can lead to accessing memory with a negative offset. This vulnerability can be exploited by an attacker to trigger a denial of service DoS,...
[SECURITY] Fedora 44 Update: perl-Crypt-PasswdMD5-1.4.3-1.fc44
This package provides MD5-based crypt functions...
CVE-2026-39829 affecting package packer for versions less than 1.9.5-14
CVE-2026-39829 affecting package packer for versions less than 1.9.5-14. A patched version of the package is available...
CVE-2026-33377 vulnerabilities
Vulnerabilities for packages: grafana, grafana-fips...
GHSA-8MRJ-8PC8-39JM vulnerabilities
Vulnerabilities for packages: grafana, grafana-fips...
CVE-2026-28380 vulnerabilities
Vulnerabilities for packages: grafana, grafana-fips...
GHSA-5M62-PW8W-7W9F vulnerabilities
Vulnerabilities for packages: thingsboard...
CVE-2026-46227
In the Linux kernel, the following vulnerability has been resolved: sctp: revalidate list cursor after sctpsendmsgtoasoc in SCTPSENDALL The SCTPSENDALL path in sctpsendmsg iterates ep-asocs with listforeachentrysafe, which caches the next entry in @tmp before the loop body runs. The body calls...
CVE-2026-46196
In the Linux kernel, the following vulnerability has been resolved: tracepoint: balance regfunc on funcadd failure in tracepointaddfunc When a tracepoint goes through the 0 - 1 transition, tracepointaddfunc invokes the subsystem's ext-regfunc before attempting to install the new probe via funcadd...
CVE-2026-46142
In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix VF illegal register access Register WXCFGPORTST is a PF restricted register. When a VF is initialized, attempting to read this register triggers an illegal register access, which lead to a system hang. When the...
CVE-2026-46140
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: validate WMT event SKB length before struct access btmtkusbhciwmtsync casts the WMT event response SKB data to struct btmtkhciwmtevt 7 bytes and struct btmtkhciwmtevtfuncc 9 bytes without first checking that the...
GHSA-6R32-H5RG-9M59 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-M56P-RP6V-288R vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-9120 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-9112 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-6R32-H5RG-9M59 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-44705 vulnerabilities
Vulnerabilities for packages: vitess, saf, kubeflow-katib, lerna, py3-jupyterlab, prism, pulumi, renovate, opensearch-dashboards...
GHSA-G857-HHFV-J68W vulnerabilities
Vulnerabilities for packages: truffleruby...
CVE-2026-39827 vulnerabilities
Vulnerabilities for packages: gitea, buildkitd, kaf, docker-cli-buildx, argocd-image-updater, terragrunt, prometheus, syft, fscrypt, rancher-machine, osv-scanner, external-secrets-operator, kine, melange, spire-server, guac, act, skaffold, docker, wal-g, gitlab-kas, minio, k3s, nfpm,...
CVE-2026-46595 vulnerabilities
Vulnerabilities for packages: argocd-image-updater-fips, skaffold-fips, zarf, cloudbeat, drone-fips, rancher, minio, prometheus-elasticsearch-exporter, traefik-fips, prometheus-mongodb-exporter, flux-fips, mattermost, kubescape-server-fips, containerd, kube-conformance, kots, kaf, keda-fips,...