3407 matches found
GHSA-MF92-479X-3373 vulnerabilities
Vulnerabilities for packages: thingsboard, apache-nifi, apache-nifi-registry, jenkins...
GHSA-9983-VRX2-FG9C vulnerabilities
Vulnerabilities for packages: nats-fips, nats-top, prometheus-nats-exporter, nats, prometheus-nats-exporter-fips, milvus, nats-top-fips, k3s, rke2-runtime-fips, telegraf, rke2-runtime, kine...
GHSA-FCJP-H8CC-6879 vulnerabilities
Vulnerabilities for packages: nats-fips, nats-top, prometheus-nats-exporter, nats, prometheus-nats-exporter-fips, milvus, nats-top-fips, k3s, rke2-runtime-fips, telegraf, rke2-runtime, kine...
CVE-2026-33217 vulnerabilities
Vulnerabilities for packages: nats-fips, nats-top, prometheus-nats-exporter, nats, prometheus-nats-exporter-fips, milvus, nats-top-fips, k3s, rke2-runtime-fips, telegraf, rke2-runtime, kine...
CVE-2026-33216 vulnerabilities
Vulnerabilities for packages: nats-fips, nats-top, prometheus-nats-exporter, nats, prometheus-nats-exporter-fips, milvus, nats-top-fips, k3s, rke2-runtime-fips, telegraf, rke2-runtime, kine...
GHSA-VPRV-35VV-Q339 vulnerabilities
Vulnerabilities for packages: nats-fips, nats-top, prometheus-nats-exporter, nats, prometheus-nats-exporter-fips, milvus, nats-top-fips, k3s, rke2-runtime-fips, telegraf, rke2-runtime, kine...
CVE-2026-23390
In the Linux kernel, the following vulnerability has been resolved: tracing/dma: Cap dmamapsg tracepoint arrays to prevent buffer overflow The dmamapsg tracepoint can trigger a perf buffer overflow when tracing large scatter-gather lists. With devices like virtio-gpu creating large DRM buffers,...
CVE-2026-23365
In the Linux kernel, the following vulnerability has been resolved: net: usb: kalmia: validate USB endpoints The kalmia driver should validate that the device it is probing has the proper number and types of USB endpoints it is expecting before it binds to it. If a malicious device were to not ha...
CVE-2026-23362
In the Linux kernel, the following vulnerability has been resolved: can: bcm: fix locking for bcmop runtime updates Commit c2aba69d0c36 "can: bcm: add locking for bcmop runtime updates" added a locking for some variables that can be modified at runtime when updating the sending bcmop with a new...
CVE-2026-23346
In the Linux kernel, the following vulnerability has been resolved: arm64: io: Extract user memory type in ioremapprot The only caller of ioremapprot outside of the generic ioremap implementation is genericaccessphys, which passes a 'pgprott' value determined from the user mapping of the target...
CVE-2026-23304
In the Linux kernel, the following vulnerability has been resolved: ipv6: fix NULL pointer deref in ip6rtgetdevrcu l3mdevmasterdevrcu can return NULL when the slave device is being un-slaved from a VRF. All other callers deal with this, but we lost the fallback to loopback in ip6rtpcpualloc -...
CVE-2026-3119
Under certain conditions, named may crash when processing a correctly signed query containing a TKEY record. The affected code can only be reached if an incoming request has a valid transaction signature TSIG from a key declared in the named configuration. This issue affects BIND 9 versions 9.20....
opencryptoki security update
3.22.0-3.2 - Resolves: RHEL-144817, CVE-2026-23893 Privilege Escalation or Data Exposure via Symlink Following...
GHSA-RJCW-VG7J-M9RC vulnerabilities
Vulnerabilities for packages: xeol, k9s, guac, kubescape-operator, kubescape, wolfictl, zarf...
CVE-2026-33320 vulnerabilities
Vulnerabilities for packages: vale...
GHSA-HWQM-QVJ9-4JR2 vulnerabilities
Vulnerabilities for packages: neuvector-fips, neuvector, teleport-operator-fips, teleport...
CVE-2025-63261
AWStats 8.0 is vulnerable to Command Injection via the open function...
GHSA-PHC3-FGPG-7M6H vulnerabilities
Vulnerabilities for packages: code-server, jitsucom-jitsu, kibana, renovate, pelias-api, librechat...