10121 matches found
CVE-2026-44061
Netatalk 1.5.0 through 4.4.2 uses DES-ECB for authentication with a timing side channel, which allows a remote attacker to recover authentication credentials via timing analysis...
CVE-2026-44059
A race condition in the privilege toggle mechanism in Netatalk 2.2.5 through 4.4.2 allows a local attacker to obtain limited information, modify limited data, or cause a minor service disruption...
CVE-2026-44049
An out-of-bounds write due to improper null termination in convertcharset in Netatalk 2.0.4 through 4.4.2 allows a remote authenticated attacker to execute arbitrary code or cause a denial of service via crafted character data...
CVE-2026-44047
An SQL injection vulnerability in the MySQL CNID backend in Netatalk 3.1.0 through 4.4.2 allows a remote authenticated attacker to obtain unauthorized access to data, modify data, or cause a denial of service...
CVE-2026-45781 vulnerabilities
Vulnerabilities for packages: goreleaser...
SUSE CVE-2026-24187
NVIDIA Display Driver for Linux contains a vulnerability where an attacker could cause a use-after-free. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code execution...
SUSE CVE-2026-24194
NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler, where a user could cause improper permission handling. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code...
SUSE CVE-2026-24198
NVIDIA GPU Display Driver for Linux contains a vulnerability where an advanced attacker could use a race condition to leak sensitive memory, which might cause limited exposure of sensitive information to an unauthorized actor. A successful exploit of this vulnerability might lead to denial of...
SUSE CVE-2026-24199
NVIDIA Display Driver for Linux contains a vulnerability in a kernel module, where a user could cause a race condition by reordering compiler or processor memory instructions. A successful exploit of this vulnerability might lead to denial of service...
CVE-2026-41568 vulnerabilities
Vulnerabilities for packages: aws-otel-collector, kots, nerdctl, rancher-machine, ko, trivy-operator, spire-server, envoy-gateway, zot, k8sgpt, osv-scanner, grafana, skopeo, docker-credential-gcr, portieris, rancher, trivy, nuclei, podman, buildah, opentelemetry-operator,...
GHSA-VP62-88P7-QQF5 vulnerabilities
Vulnerabilities for packages: aws-otel-collector, kots, nerdctl, rancher-machine, ko, trivy-operator, spire-server, envoy-gateway, zot, k8sgpt, osv-scanner, grafana, skopeo, docker-credential-gcr, portieris, rancher, trivy, nuclei, podman, buildah, opentelemetry-operator,...
CVE-2026-41567 vulnerabilities
Vulnerabilities for packages: aws-otel-collector, kots, nerdctl, rancher-machine, ko, trivy-operator, spire-server, envoy-gateway, zot, k8sgpt, grafana, skopeo, docker-credential-gcr, portieris, rancher, trivy, nuclei, podman, buildah, opentelemetry-operator, amazon-cloudwatch-agent-operator,...
CVE-2026-41567 vulnerabilities
Vulnerabilities for packages: buildah-fips, ko, elastic-agent, envoy-gateway, ko-fips, k8sgpt, harvester, zot, spire-server, beats-fips, portieris, trivy-operator, vault, kubedock, amazon-cloudwatch-agent-operator, cloudbeat, nerdctl, nrdot-collector-k8s-fips, trivy, spire-server-fips,...
CVE-2026-44167 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2026-44231
RT is an open source, enterprise-grade issue and ticket tracking system. Versions prior to 5.0.10, 6.0.0 and above, prior to 6.0.3 contain an information disclosure and privilege escalation vulnerability in the REST 2.0 API. A privileged non-administrative user can obtain authentication credentia...
CVE-2026-44230
RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.4 up to but not including 5.0.10, and 6.0.0 up to but not including 6.0.3 contain a reflected Cross-Site Scripting XSS vulnerability where an attacker who can induce an authenticated RT user to visit a crafted U...
CVE-2026-6841
Request Tracker is vulnerable to a reflected cross-site scripting XSS vulnerability via the "Page" parameter in GET requests. An attacker can craft a URL that, when opened, results in arbitrary JavaScript execution in the victim’s browser. This vulnerability affects versions from 5.0.4 up to 5.0....
CVE-2026-46378 vulnerabilities
Vulnerabilities for packages: vale...