3431 matches found
CVE-2026-33983
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, progressivedecompresstileupgrade detects a mismatch via progressiverfxquantcmpequal but only emits WLogWARN, execution continues. The wrapped value 247 is used as a shift exponent, causing undefined behavior...
GHSA-X744-4WPC-V9H2 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector-fips, livekit-cli, opentelemetry-collector-contrib-fips, newrelic-infrastructure-agent-fips, docker, elastic-agent-fips, beats-fips, harvester, opentelemetry-operator, grafana, k8sgpt, rancher-machine, openfga-fips, amazon-cloudwatch-agent-fips,...
CVE-2026-33672 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows, vitess, lerna, node-gyp, vite, npm, kubeflow-pipelines, pulumi, renovate, tileserver-gl, ts-patch, opensearch-dashboards, sqlpad, nextcloud-server, code-server, prism, rancher-api-ui, saf...
CVE-2026-4697 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-5CGM-H8QG-5H77 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-6956-6R33-F8XW vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-CR5G-9FRG-Q8M8 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-CJ36-HXHV-2QXH vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-X3F3-63G4-54J4 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-4696 vulnerabilities
Vulnerabilities for packages: firefox-esr, firefox...
GHSA-MRRG-439G-X65P vulnerabilities
Vulnerabilities for packages: firefox-esr, firefox...
GHSA-VXPV-C2H6-HQ9V vulnerabilities
Vulnerabilities for packages: firefox-esr, firefox...
CVE-2025-59028
When sending invalid base64 SASL data, login process is disconnected from the auth server, causing all active authentication sessions to fail. Invalid BASE64 data can be used to DoS a vulnerable server to break concurrent logins. Install fixed version or disable concurrency in login processes hea...
GHSA-3C37-WWVX-H642 vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0, tritonserver-backend-vllm-cuda-12.9, localstack, py3-cbor2, vllm-openai-cuda-12.9, py3-vllm-cuda-12.4...
ROS-20260327-73-0009
Vulnerability in openbabel related to an operation exceeding buffer boundaries in memory. The vulnerability can be exploited remotely...
CVE-2026-33699
pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.2 have a vulnerability in which an attacker can craft a PDF which leads to an infinite loop. This requires reading a file in non-strict mode. This has been fixed in pypdf 6.9.2. If users cannot upgrade yet, consider...
CVE-2026-25645 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, k8s-sidecar, kubeflow-jupyter-web-app, superset, open-webui, kubeflow-volumes-web-app, pypy-3.11, jupyter-base-notebook, jwt-tool, mlflow, airflow, kubeflow-pipelines, py3-cassandra-medusa, dask-kubernetes, py3-pip, az, datadog-agent, ggshield,...
GHSA-GFWX-W7GR-FVH7 vulnerabilities
Vulnerabilities for packages: open-webui, kubeflow-pipelines-visualization-server, py3-nltk...
GHSA-JM6W-M3J8-898G vulnerabilities
Vulnerabilities for packages: nemo, apache-beam-python-3.13-sdk, open-webui, kubeflow-pipelines-visualization-server, label-studio, apache-beam-python-3.12-sdk, apache-beam-python-3.11-sdk, py3-nltk...