10127 matches found
CVE-2026-32748
Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap Use-After-Free bugs, Squid is vulnerable to Denial of Service when handling ICP traffic. This problem allows a remote attacker to perform a reliable and repeatable...
GHSA-X6G4-F6Q3-FQVV vulnerabilities
Vulnerabilities for packages: nats-top, nats-fips, nats-top-fips, rke2-runtime, k3s, nats, prometheus-nats-exporter-fips, rke2-runtime-fips, kine, telegraf, prometheus-nats-exporter, milvus...
CVE-2026-33246 vulnerabilities
Vulnerabilities for packages: nats-top, nats-fips, nats-top-fips, rke2-runtime, k3s, nats, prometheus-nats-exporter-fips, rke2-runtime-fips, kine, telegraf, prometheus-nats-exporter, milvus...
CVE-2026-33223 vulnerabilities
Vulnerabilities for packages: nats-top, nats-fips, nats-top-fips, rke2-runtime, k3s, nats, prometheus-nats-exporter-fips, rke2-runtime-fips, kine, telegraf, prometheus-nats-exporter, milvus...
GHSA-V722-JCV5-W7MC vulnerabilities
Vulnerabilities for packages: nats-top, nats-fips, nats-top-fips, rke2-runtime, k3s, nats, prometheus-nats-exporter-fips, rke2-runtime-fips, kine, telegraf, prometheus-nats-exporter, milvus...
CVE-2026-33215 vulnerabilities
Vulnerabilities for packages: nats-top, nats-fips, nats-top-fips, rke2-runtime, k3s, nats, prometheus-nats-exporter-fips, rke2-runtime-fips, kine, telegraf, prometheus-nats-exporter, milvus...
CVE-2026-33219 vulnerabilities
Vulnerabilities for packages: nats-top, nats-fips, nats-top-fips, rke2-runtime, k3s, nats, prometheus-nats-exporter-fips, rke2-runtime-fips, kine, telegraf, prometheus-nats-exporter, milvus...
SUSE CVE-2026-21717
A flaw in V8's string hashing mechanism causes integer-like strings to be hashed to their numeric value, making hash collisions trivially predictable. By crafting a request that causes many such collisions in V8's internal string table, an attacker can significantly degrade performance of the...
CVE-2026-23358
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix error handling in slot reset If the device has not recovered after slot reset is called, it goes to out label for error handling. There it could make decision based on uninitialized hive pointer and could result i...
CVE-2026-23281
In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix use-after-free in lbsfreeadapter The lbsfreeadapter function uses timerdelete non-synchronous for both commandtimer and txlockuptimer before the structure is freed. This is incorrect because timerdelete does n...
CVE-2026-33169 vulnerabilities
Vulnerabilities for packages: ruby3.4-rails, ruby3.2-rails, gitlab-rails-ce, gitlab-rails-ce-fips, kube-fluentd-operator, cinc-auditor, kube-logging-operator...
GHSA-CG4J-Q9V8-6V38 vulnerabilities
Vulnerabilities for packages: ruby3.4-rails, ruby3.2-rails, gitlab-rails-ce, gitlab-rails-ce-fips, kube-fluentd-operator, cinc-auditor, kube-logging-operator...
CVE-2026-33174 vulnerabilities
Vulnerabilities for packages: ruby3.2-rails...
CVE-2026-33176 vulnerabilities
Vulnerabilities for packages: cinc-auditor, ruby3.2-rails, kube-logging-operator, kube-fluentd-operator...
CVE-2026-3591
A use-after-return vulnerability exists in the named server when handling DNS queries signed with SIG0. Using a specially-crafted DNS request, an attacker may be able to cause an ACL to improperly mismatch an IP address. In a default-allow ACL denying only specific IP addresses, this may lead to...
CVE-2026-33412
Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob function on Unix-like systems. By including a newline character \n in a pattern passed to glob, an attacker may be able to execute arbitrary shell commands. This...
CVE-2026-27784
The 32-bit implementation of NGINX Open Source has a vulnerability in the ngxhttpmp4module module, which might allow an attacker to over-read or over-write NGINX worker memory resulting in its termination, using a specially crafted MP4 file. The issue only affects 32-bit NGINX Open Source if it i...
CVE-2026-33056 vulnerabilities
Vulnerabilities for packages: buck2, wasmcloud, rye, cargo-c, pixi, sccache, zizmor, qdrant, deno, wasm-pack, rustup...
CVE-2026-33250
Freeciv21 is a free open source, turn-based, empire-building strategy game. Versions prior to 3.1.1 crash with a stack overflow when receiving specially-crafted packets. A remote attacker can use this to take down any public server. A malicious server can use this to crash the game on the player'...