10213 matches found
CVE-2026-33169 vulnerabilities
Vulnerabilities for packages: ruby3.4-rails, gitlab-rails-ce-fips, ruby3.2-rails, gitlab-rails-ce, kube-logging-operator, kube-fluentd-operator, cinc-auditor...
CVE-2026-33176 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, cinc-auditor, ruby3.2-rails, kube-fluentd-operator...
CVE-2026-33174 vulnerabilities
Vulnerabilities for packages: ruby3.2-rails...
CVE-2026-3591
A use-after-return vulnerability exists in the named server when handling DNS queries signed with SIG0. Using a specially-crafted DNS request, an attacker may be able to cause an ACL to improperly mismatch an IP address. In a default-allow ACL denying only specific IP addresses, this may lead to...
CVE-2026-33412
Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob function on Unix-like systems. By including a newline character \n in a pattern passed to glob, an attacker may be able to execute arbitrary shell commands. This...
CVE-2026-27784
The 32-bit implementation of NGINX Open Source has a vulnerability in the ngxhttpmp4module module, which might allow an attacker to over-read or over-write NGINX worker memory resulting in its termination, using a specially crafted MP4 file. The issue only affects 32-bit NGINX Open Source if it i...
CVE-2026-33056 vulnerabilities
Vulnerabilities for packages: sccache, buck2, rye, wasm-pack, wasmcloud, rustup, cargo-c, pixi, qdrant, zizmor, deno...
CVE-2026-33250
Freeciv21 is a free open source, turn-based, empire-building strategy game. Versions prior to 3.1.1 crash with a stack overflow when receiving specially-crafted packets. A remote attacker can use this to take down any public server. A malicious server can use this to crash the game on the player'...
GHSA-GCHP-Q4R4-X4FF vulnerabilities
Vulnerabilities for packages: mise, rye, wasm-pack, deno, sccache, zizmor, buck2, bootc, wasmcloud, fnm, qdrant, rustup, cargo-c, pixi, typst...
CVE-2026-33481 vulnerabilities
Vulnerabilities for packages: kubescape-operator, k9s, wolfictl, xeol, kubescape, guac, zarf...
GHSA-QPXP-75PX-XJCP vulnerabilities
Vulnerabilities for packages: open-webui, litellm...
cpython: POP3 command injection in user-controlled commands
A flaw was found in the poplib module in the Python standard library. The poplib module does not reject control characters, such as newlines, in user-controlled input passed to POP3 commands. This issue allows an attacker to inject additional commands to be executed in the POP3 server...
CVE-2026-33349 vulnerabilities
Vulnerabilities for packages: saf, renovate, langfuse, prism, kubeflow-pipelines, tileserver-gl...
CVE-2026-27980 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, langfuse...
CVE-2026-30836 vulnerabilities
Vulnerabilities for packages: caddy...
CVE-2026-33155 vulnerabilities
Vulnerabilities for packages: dbt-bigquery, dbt-core, dbt-snowflake, localstack...
CVE-2026-33154 vulnerabilities
Vulnerabilities for packages: awx...
GHSA-PCGW-QCV5-H8CH vulnerabilities
Vulnerabilities for packages: teleport, neuvector, neuvector-fips, teleport-operator-fips...