10213 matches found
SUSE CVE-2026-41051
csync2 uses insecure temporary directories when compiled with C99 or later, allowing for TOCTOU style attacks on the temporary directories...
CVE-2026-40924 vulnerabilities
Vulnerabilities for packages: tekton-pipelines, tekton-pipelines-fips, tekton-chains-fips, tekton-chains, tkn-fips, tkn...
CVE-2026-41651
PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a cross-distro, cross-architecture API. PackageKit between and including versions 1.0.2 and 1.3.4 is vulnerable to a time-of-check time-of-use TOCTOU race condition on transaction flags that...
CVE-2026-41564
CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking. The Crypt::PK::RSA, Crypt::PK::DSA, Crypt::PK::DH, Crypt::PK::ECC, Crypt::PK::Ed25519 and Crypt::PK::X25519 modules seed a per-object PRNG state in their constructors and reuse it without fork detection. A...
CVE-2026-5744
hw/uefi: heap overflow...
CVE-2026-2332 vulnerabilities
Vulnerabilities for packages: kafka, akhq, cassandra-reaper, cloudwatch-exporter, apache-nifi, trino, strimzi-kafka-operator, solr, apache-tika, jenkins, druid, apache-pulsar...
GHSA-VFMQ-68HX-4JFW vulnerabilities
Vulnerabilities for packages: label-studio, open-webui, synapse, datahub-ingestion-fips, datahub-ingestion, nemo, datadog-agent-fips, kubeflow-pipelines-visualization-server, authentik-fips, awx, datadog-agent, authentik, airflow...
CVE-2026-35368
A vulnerability exists in the chroot utility of uutils coreutils when using the --userspec option. The utility resolves the user specification via getpwnam after entering the chroot but before dropping root privileges. On glibc-based systems, this can trigger the Name Service Switch NSS to load...
CVE-2026-6861
A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG Scalable Vector Graphics CSS Cascading Style Sheets data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may lead to a denial...
CVE-2026-33597
PRSD detection denial of service...
CVE-2026-31503
In the Linux kernel, the following vulnerability has been resolved: udp: Fix wildcard bind conflict check when using hash2 When binding a udpsock to a local address and port, UDP uses two hashes udptable-hash and udptable-hash2 for collision detection. The current code switches to "hash2" when...
CVE-2026-35329
NULL-Pointer Dereference When Processing Padding in PKCS7...
CVE-2026-35331
Accepting Certificates Violating Name Constraints...
CVE-2026-33257
An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default...
CVE-2026-6846
A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF Extended Common Object File Format object file during linking. A local attacker could trick a user into processing this malicious file, which could lead to arbitrary code execution,...
GHSA-394W-HWHG-8VGM vulnerabilities
Vulnerabilities for packages: zed, yara-x, wizer, wasmcloud...
CVE-2026-34983 vulnerabilities
Vulnerabilities for packages: wasmcloud...
GHSA-F984-PCP8-V2P7 vulnerabilities
Vulnerabilities for packages: zed, yara-x, wizer, wasmcloud...