10213 matches found
CVE-2026-7258 affecting package php for versions less than 8.3.31-1
CVE-2026-7258 affecting package php for versions less than 8.3.31-1. A patched version of the package is available...
CVE-2026-46470
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemuxaudiocaps function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero...
CVE-2026-40466 vulnerabilities
Vulnerabilities for packages: geoserver...
CVE-2026-8280
Removed by vendor...
GHSA-H7MW-GPVR-XQ4M vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, nextcloud-server...
GHSA-RPMF-866Q-6P89 vulnerabilities
Vulnerabilities for packages: code-server...
GHSA-Q29P-9PFR-J652 vulnerabilities
Vulnerabilities for packages: yazi...
CVE-2026-42189 vulnerabilities
Vulnerabilities for packages: yazi...
CVE-2026-43220 vulnerabilities
Vulnerabilities for packages: linux-aws, linux-vmware...
GHSA-86C9-4W26-QF4C vulnerabilities
Vulnerabilities for packages: linux-aws, linux-vmware...
CVE-2026-5766 vulnerabilities
Vulnerabilities for packages: py3-django, authentik, authentik-fips...
CVE-2026-42926
When NGINX Open Source is configured to proxy HTTP/2 traffic by setting proxyhttpversion to 2, and also uses proxysetbody, an attacker may be able to inject frame headers and payload bytes to the upstream peer. Note: Software versions which have reached End of Technical Support EoTS are not...
CVE-2026-43488
In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Prevent interrupt storm on host controller error HCE The xHCI controller reports a Host Controller Error HCE in UAS Storage Device plug/unplug scenarios on Android devices. HCE is checked in xhciirq function and causes...
CVE-2026-42934
NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpcharsetmodule module. When charset, sourcecharset, and charsetmap and proxypass with disabled buffering "off" directives are configured, unauthenticated attackers can send requests that with conditions beyond the attackers' contr...
CVE-2026-43487
In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Disable LPM on ST1000DM010-2EP102 According to a user report, the ST1000DM010-2EP102 has problems with LPM, causing random system freezes. The drive belongs to the same BarraCuda family as the ST2000DM008-2FR102...
CVE-2026-44288 vulnerabilities
Vulnerabilities for packages: opentelemetry-auto-instrumentations-node, librechat, pulumi, kubeflow-centraldashboard, cadence-web, vitess, kibana, gemini-cli, renovate, nemo, homepage...
CVE-2026-4424 vulnerabilities
Vulnerabilities for packages: libarchive...
CVE-2026-4426 vulnerabilities
Vulnerabilities for packages: libarchive...