10127 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-5277
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in ANGLE in Google Chrome on Windows prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to perform an o...
GHSA-PPP5-5V6C-4JWP vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, kubeflow-pipelines, kubeflow-katib, kubeflow-centraldashboard...
GHSA-Q67F-28XG-22RW vulnerabilities
Vulnerabilities for packages: kubeflow-katib, kubeflow-pipelines, opensearch-dashboards, gitlab-rails-ce, kubeflow-centraldashboard, opensearch-dashboards-fips, gitlab-rails-ce-fips, wazuh-dashboard-fips, wazuh-dashboard, kibana, arangodb...
CVE-2026-0396
An attacker might be able to inject HTML content into the internal web dashboard by sending crafted DNS queries to a DNSdist instance where domain-based dynamic rules have been enabled via either DynBlockRulesGroup:setSuffixMatchRule or DynBlockRulesGroup:setSuffixMatchRuleFFI...
CVE-2026-27853
An attacker might be able to trigger an out-of-bounds write by sending crafted DNS responses to a DNSdist using the DNSQuestion:changeName or DNSResponse:changeName methods in custom Lua code. In some cases the rewritten packet might become larger than the initial response and even exceed 65535...
CVE-2026-33809 vulnerabilities
Vulnerabilities for packages: hugo-extended, hugo, mailpit, rclone, mattermost, ollama, seaweedfs...
GHSA-87MJ-5GGW-8QC3 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-4926 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, langfuse, langfuse-fips, tileserver-gl, vitess, redisinsight, code-server, saf, opensearch-dashboards-fips, thingsboard, gemini-cli, wazuh-dashboard, kibana, tileserver-gl-fips...
GHSA-6Q6W-FF4V-HGR5 vulnerabilities
Vulnerabilities for packages: ghostscript...
CVE-2026-33983
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, progressivedecompresstileupgrade detects a mismatch via progressiverfxquantcmpequal but only emits WLogWARN, execution continues. The wrapped value 247 is used as a shift exponent, causing undefined behavior...
CVE-2026-21711
A flaw in Node.js Permission Model network enforcement leaves Unix Domain Socket UDS server operations without the required permission checks, while all comparable network paths correctly enforce them. As a result, code running under --permission without --allow-net can create and expose local IP...
CVE-2026-21713
A flaw in Node.js HMAC verification uses a non-constant-time comparison when validating user-provided signatures, potentially leaking timing information proportional to the number of matching bytes. Under certain threat models where high-resolution timing measurements are possible, this behavior...
GHSA-3MFM-83XF-C92R vulnerabilities
Vulnerabilities for packages: nextcloud-server, py3-jupyterlab, prism, ts-patch, lerna, opensearch-dashboards, rancher-api-ui...
CVE-2026-33941 vulnerabilities
Vulnerabilities for packages: nextcloud-server, py3-jupyterlab, prism, ts-patch, lerna, opensearch-dashboards, rancher-api-ui...
GHSA-9CX6-37PM-9JFF vulnerabilities
Vulnerabilities for packages: nextcloud-server, py3-jupyterlab, prism, ts-patch, lerna, opensearch-dashboards, rancher-api-ui...
GHSA-XHPV-HC6G-R9C6 vulnerabilities
Vulnerabilities for packages: nextcloud-server, py3-jupyterlab, prism, ts-patch, lerna, opensearch-dashboards, rancher-api-ui...
CVE-2026-33938 vulnerabilities
Vulnerabilities for packages: nextcloud-server, py3-jupyterlab, prism, ts-patch, lerna, opensearch-dashboards, rancher-api-ui...
CVE-2025-59799 vulnerabilities
Vulnerabilities for packages: ghostscript...
CVE-2025-23217 vulnerabilities
Vulnerabilities for packages: mitmproxy...
CVE-2026-5123
A weakness has been identified in osrg GoBGP up to 4.3.0. This impacts the function DecodeFromBytes of the file pkg/packet/bgp/bgp.go. Executing a manipulation of the argument data1 can lead to off-by-one. The attack may be launched remotely. Attacks of this nature are highly complex. The...