10213 matches found
GHSA-V5RP-3MCX-FR73 vulnerabilities
Vulnerabilities for packages: libvips...
CVE-2026-20777
A heap-based buffer overflow vulnerability exists in the Nicolet WFT parsing functionality of The Biosig Project libbiosig 3.9.2 and Master Branch db9a9a63. A specially crafted .wft file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...
GHSA-F3VJ-J2M6-8HFJ vulnerabilities
Vulnerabilities for packages: postgresql...
GHSA-QW3H-8VXV-JF6C vulnerabilities
Vulnerabilities for packages: postgresql...
GHSA-2RW7-X74F-JG35 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-3195
A flaw was found in QEMU. When reading input audio in the virtio-snd device input callback, the virtiosndpcmincb function did not check whether the iov could fit the data buffer, potentially leading to a heap out-of-bounds write. This issue exists due to an incomplete fix for CVE-2024-7730...
CVE-2026-3196
An integer overflow vulnerability was found in the virtio-snd device via PCMINFO requests from the guest. A malicious guest can provide out-of-bounds stream counts, potentially leading to unbounded memory allocation on the host and a denial of service condition...
GHSA-MW96-CPMX-2VGC vulnerabilities
Vulnerabilities for packages: langfuse, arangodb, langfuse-fips, vitess, nextcloud-server, librechat, gitlab-rails-ce-fips, vite...
CVE-2026-3408
A vulnerability was identified in Open Babel up to 3.1.1. This impacts the function OBAtom::GetExplicitValence of the file isrc/atom.cpp of the component CDXML File Handler. Such manipulation leads to null pointer dereference. The attack can be launched remotely. The exploit is publicly available...
CVE-2026-28351 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-28351 vulnerabilities
Vulnerabilities for packages: open-webui, litellm, nemo...
valkey security update
8.0.7-1 - Rebase to 8.0.7 for CVE-2026-21863 CVE-2025-67733...
GHSA-2X45-7FC3-MXWQ vulnerabilities
Vulnerabilities for packages: zabbix-fips, zabbix...
GHSA-465P-V42X-3FMJ vulnerabilities
Vulnerabilities for packages: kots...
CVE-2026-21619
Uncontrolled Resource Consumption, Deserialization of Untrusted Data vulnerability in hexpm hexcore hexapi modules, hexpm hex mixhexapi modules, erlang rebar3 r3hexapi modules allows Object Injection, Excessive Allocation. This vulnerability is associated with program files src/hexapi.erl,...
Incorrect Default Permissions
Overview Affected versions of this package are vulnerable to Incorrect Default Permissions in the clihistory feature. An attacker can access sensitive command history and API request/response data by reading the history database file if it is created with default permissions on a multi-user Unix...
CVE-2026-3062 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-3063 vulnerabilities
Vulnerabilities for packages: chromium...