10125 matches found
CVE-2026-6757
Invalid pointer in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...
CVE-2026-32147
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Erlang OTP ssh sshsftpd module allows an authenticated SFTP user to modify file attributes outside the configured chroot directory. The SFTP daemon sshsftpd stores the raw, user-supplied path in file...
CVE-2026-39314 affecting package cups for versions less than 2.4.17-1
CVE-2026-39314 affecting package cups for versions less than 2.4.17-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-40173 vulnerabilities
Vulnerabilities for packages: dgraph...
ROS-20260420-73-0041
Vulnerability in beats related to unchecked array indexing. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information...
CVE-2026-33558
Information exposure vulnerability has been identified in Apache Kafka. The NetworkClient component will output entire requests and responses information in the DEBUG log level in the logs. By default, the log level is set to INFO level. If the DEBUG level is enabled, the sensitive information wi...
CVE-2026-41242 vulnerabilities
Vulnerabilities for packages: kibana, opentelemetry-auto-instrumentations-node, kubeflow-centraldashboard, nemo, librechat, langfuse, jitsucom-jitsu, langfuse-fips, pulumi, vitess, gemini-cli, renovate...
CVE-2026-40494
SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to commit 45d48d1f2e8e0d73e80bc1fd5310cb57f4547302, the TGA codec's RLE decoder in tga.c has an asymmetric bounds check vulnerability. The run-packet path line 297 correctl...
CVE-2026-40492
SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to commit 36aa5c7ec8a2bb35f6fb867a1177a6f141156b02, the XWD codec resolves pixel format based on pixmapdepth but the byte-swap code uses bitsperpixel independently. When...
CVE-2026-40611 vulnerabilities
Vulnerabilities for packages: traefik, sftpgo...
GHSA-497X-RRR9-68JP vulnerabilities
Vulnerabilities for packages: grafana, grafana-alloy...
CVE-2026-40336
libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 have a memory leak in ptpunpackSonyDPD in camlibs/ptp2/ptp-pack.c lines 884–885. When processing a secondary enumeration list introduced in 2024+ Sony cameras, the function overwrites dpd-FORM.Enum.SupportedVal...
ruby: Properly initialize the random number generator when forking new process
Ruby before 1.8.7-p352 does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the values of random numbers by leveraging knowledge of the number sequence obtained in a different child process, a related issue to CVE-2003-0900. NOTE: this issu...
CVE-2026-40342
Firebird is an open-source relational database management system. In versions prior to 5.0.4, 4.0.7 and 3.0.14, the external engine plugin loader concatenates a user-supplied engine name into a filesystem path without filtering path separators or .. components. An authenticated user with CREATE...
CVE-2026-34477 vulnerabilities
Vulnerabilities for packages: neo4j, celeborn, apache-activemq-artemis, airflow, apache-pulsar, infinispan, akhq, logstash, solr, spark, flink, opensearch, wavefront-proxy, zipkin, kafka, strimzi-kafka-operator, sonarqube, kserve-modelmesh...
CVE-2026-5907 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-96RX-8295-GJVX vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-2RW5-37W7-549X vulnerabilities
Vulnerabilities for packages: chromium...