10125 matches found
CVE-2026-31743
In the Linux kernel, the following vulnerability has been resolved: nvmem: zynqmpnvmem: Fix buffer size in DMA and memcpy Buffer size used in dma allocation and memcpy is wrong. It can lead to undersized DMA buffer access and possible memory corruption. use correct buffer size in dmaalloccoherent...
SUSE CVE-2026-5260
A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure...
CVE-2026-40962 vulnerabilities
Vulnerabilities for packages: ffmpeg...
CVE-2026-40542 vulnerabilities
Vulnerabilities for packages: apache-nifi, trino, opensearch, dependency-track...
GHSA-V468-QCJX-R72W vulnerabilities
Vulnerabilities for packages: apache-nifi, trino, opensearch, dependency-track...
CVE-2026-40962 vulnerabilities
Vulnerabilities for packages: ffmpeg...
CVE-2026-31693
In the Linux kernel, the following vulnerability has been resolved: cifs: some missing initializations on replay In several places in the code, we have a label to signify the start of the code where a request can be replayed if necessary. However, some of these places were missing the necessary...
CVE-2026-31787
In the Linux kernel, the following vulnerability has been resolved: xen/privcmd: fix double free via VMA splitting privcmdvmops defines .close privcmdclose, but neither .maysplit nor .open. When userspace does a partial munmap on a privcmd mapping, the kernel splits the VMA via splitvma. Since...
SUSE CVE-2026-5773
libcurl might in some circumstances reuse the wrong connection for SMBS transfers. libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid overhead. When reusing a connection a range of criteria must be met. Due to a logical error in the...
SUSE CVE-2026-40684
In Exim before 4.99.2, on systems using musl libc not glibc, an attacker can crash the connection instance when malformed DNS data is present in PTR records. This is caused by a dnexpand oddity in octal printing...
GHSA-Q339-8RMV-2MHV vulnerabilities
Vulnerabilities for packages: ruby4.0-rails, ruby3.3-rails, ruby3.4-rails, ruby, jruby, ruby3.2-rails...
GHSA-GH4J-GQV2-49F6 vulnerabilities
Vulnerabilities for packages: kibana, langfuse-fips, py3-captum, tileserver-gl-fips, langfuse, tileserver-gl, opensearch-dashboards-fips, opensearch-dashboards, librechat, kubeflow-pipelines, prism, renovate, saf, thingsboard-fips...
CVE-2026-5260
A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure...
CVE-2026-33845
A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow during reassembly and resulting in an out-of-bounds read. This issue is remotely exploitable and may cause information disclosure or denial of service...
CVE-2026-42009
A flaw was found in gnutls. A remote attacker could exploit an issue in the Datagram Transport Layer Security DTLS packet reordering logic. The comparator function, responsible for ordering DTLS packets by sequence numbers, did not correctly handle packets with duplicate sequence numbers. This...
CVE-2026-7378
Crash in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...
CVE-2026-32936 vulnerabilities
Vulnerabilities for packages: eks-distro, juicefs, kubernetes-dns-node-cache, k8sgateway-fips, k8sgateway, eks-distro-fips, kubernetes-dns-node-cache-fips...
GHSA-63CW-R7XF-JMWR vulnerabilities
Vulnerabilities for packages: eks-distro, juicefs, kubernetes-dns-node-cache, k8sgateway-fips, k8sgateway, eks-distro-fips, kubernetes-dns-node-cache-fips...
CVE-2026-40684
In Exim before 4.99.2, on systems using musl libc not glibc, an attacker can crash the connection instance when malformed DNS data is present in PTR records. This is caused by a dnexpand oddity in octal printing...