10119 matches found
GHSA-HP84-P2GQ-6FVR vulnerabilities
Vulnerabilities for packages: pgadmin4...
SUSE CVE-2026-41045
A time-to-check-time-of-use in polkit authentication of qSnapper before version 1.3.3 allowed a local attacker to bypass qSnappers authentication mechanism and operate e.g. as root user...
SUSE CVE-2026-41046
A path traversal attack when using a "configName" parameter in qSnapper before version 1.3.3 allowed a local attacker to use malicious config files for snapper and so cause a denial of service or potentially escalate privileges to root...
SUSE CVE-2026-42306
Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during docker cp mount setup allows a malicious container to redirect a bind mount target to an arbitrary...
GHSA-X7HR-W5R2-H6WG vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
GHSA-4RHG-H8F2-V4JM vulnerabilities
Vulnerabilities for packages: pgadmin4...
CVE-2026-7818 vulnerabilities
Vulnerabilities for packages: pgadmin4...
CVE-2026-47766
Unknown description...
CVE-2026-46026
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Limit the maximum number of lookups Current code does no bound checking on the number of lookups a client can perform. Though the code restricts the lookups to local clients, there is still a possibility of a...
CVE-2026-46063
In the Linux kernel, the following vulnerability has been resolved: x86/shstk: Prevent deadlock during shstk sigreturn During sigreturn the shadow stack signal frame is popped. The kernel does this by reading the shadow stack using normal read accesses. When it can't assume the memory is shadow...
GHSA-HFFM-XVC3-VPRC vulnerabilities
Vulnerabilities for packages: renovate, gemini-cli...
USN-8307-1: ONNX vulnerability
It was discovered that ONNX did not properly validate paths when extracting tar archives during model downloads. An attacker could possibly use this issue to overwrite arbitrary files on the system...
CVE-2026-48864
A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within .solv files due to insufficient input validation. An attacker can provide a specially crafted .solv file, which, when processed by a vulnerable application, can lea...
CVE-2026-4480
A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J" substitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by...
CVE-2026-42151 vulnerabilities
Vulnerabilities for packages: fluent-bit-plugin-loki, trillian, aws-otel-collector, prometheus-pushgateway, certificate-transparency, metrics-server, istio, prometheus, tempo, loki, amazon-cloudwatch-agent-operator, k8sgpt, mc, minio, minio-operator, cloud-sql-proxy, prometheus-operator,...
GHSA-WG65-39GG-5WFJ vulnerabilities
Vulnerabilities for packages: fluent-bit-plugin-loki, trillian, aws-otel-collector, prometheus-pushgateway, certificate-transparency, metrics-server, istio, prometheus, tempo, loki, amazon-cloudwatch-agent-operator, k8sgpt, mc, minio, minio-operator, cloud-sql-proxy, prometheus-operator,...
CVE-2026-32933 vulnerabilities
Vulnerabilities for packages: promitor...
GHSA-RVV3-G6HJ-G44X vulnerabilities
Vulnerabilities for packages: promitor...
CVE-2026-8376
Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds. Perlstudychunk in regcompstudy.c checked the size of the joined substring buffer in characters rather than bytes. For a quantified fixed substring with a lar...
