10121 matches found
gimp: GIMP: Remote Code Execution via XPM File Parsing Integer Overflow
A flaw was found in GIMP. Remote attackers can exploit this vulnerability by tricking a user into opening a malicious XPM X PixMap image file. This can lead to an an integer overflow during file processing, allowing the attacker to execute arbitrary code on the affected system...
CVE-2026-23558
The adjustments made for XSA-379 as well as those subsequently becoming XSA-387 still left a race window, when a HVM or PVH guest does a grant table version change from v2 to v1 in parallel with mapping the status pages via XENMEMaddtophysmap. Some of the status pages may then be freed while...
UBUNTU-CVE-2025-14575
An Uncontrolled Search Path Element vulnerability in the OpenSSL TLS backend of Qt Network qtbase in Qt Qt Framework Unix allows a local attacker to load a rogue CA certificate as a trusted system authority via a crafted certificate file placed in the application's working directory...
CVE-2026-28388 vulnerabilities
Vulnerabilities for packages: libcrypto3-2.34, openssl...
CVE-2026-31790 vulnerabilities
Vulnerabilities for packages: libcrypto3-2.34, openssl, openssl-provider-fips...
Important: giflib update
Please update...
Incorrect Permission Assignment for Critical Resource
Overview @steipete/summarize is a Link → clean text → summary. Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource in the configuration file rewrite process. An attacker can access sensitive credentials by reading files created with overly...
CVE-2026-41150 vulnerabilities
Vulnerabilities for packages: librechat, langfuse, langfuse-fips...
CVE-2026-41159 vulnerabilities
Vulnerabilities for packages: librechat, langfuse, langfuse-fips...
CVE-2026-45246
Summarize prior to 0.15.1 contains an insecure file permission vulnerability in the refresh-free configuration rewrite path that allows local users to read sensitive credentials by exploiting default filesystem permissions. When the refresh-free path rewrites the configuration file, it creates th...
GHSA-3644-Q5CJ-C5C7 vulnerabilities
Vulnerabilities for packages: open-webui, langfuse...
CVE-2026-44902 vulnerabilities
Vulnerabilities for packages: langfuse...
SUSE CVE-2026-45409
Internationalized Domain Names in Applications IDNA for Python provides support for Internationalized Domain Names in Applications IDNA and Unicode IDNA Compatibility Processing. In versions prior to 3.15, payloads such as "\u0660" N or "\u30fb" N + "\u6f22" utilize the validcontexto function pri...
CVE-2026-42009
A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security DTLS packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This...
Summarize 安全漏洞
Summarize is a multi-source rapid summarization tool developed by Peter Steinberger. Versions of Summarize prior to 0.15.1 contain security vulnerabilities. These vulnerabilities stem from insecure file permissions in the configuration rewritepath without refreshing, allowing local users to acces...
GHSA-95JQ-RWVF-VJX4 vulnerabilities
Vulnerabilities for packages: thingsboard...
GHSA-69CC-CV78-QC8G vulnerabilities
Vulnerabilities for packages: thingsboard...
GHSA-24J9-X2WG-9QV6 vulnerabilities
Vulnerabilities for packages: thingsboard...