10213 matches found
CVE-2026-25530
Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, the getSwimlane API method lacks project-level authorization, allowing authenticated users to access swimlane data from projects they cannot access. This vulnerability is fixed in 1.2.50...
CVE-2026-1190 vulnerabilities
Vulnerabilities for packages: keycloak...
GHSA-VC2W-4V3P-2MQW vulnerabilities
Vulnerabilities for packages: solr...
GHSA-QR3P-2XJ2-Q7HQ vulnerabilities
Vulnerabilities for packages: solr...
GHSA-QR3P-2XJ2-Q7HQ vulnerabilities
Vulnerabilities for packages: solr...
GHSA-GM8Q-M8MV-JJ5M vulnerabilities
Vulnerabilities for packages: nemo...
CVE-2026-24688 vulnerabilities
Vulnerabilities for packages: open-webui, nemo...
GHSA-9G9P-9GW9-JX7F vulnerabilities
Vulnerabilities for packages: langfuse-fips, langfuse...
CVE-2025-68740 affecting package kernel for versions less than 6.6.121.1-1
CVE-2025-68740 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...
CVE-2026-24676
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, AUDIN format renegotiation frees the active format list while the capture thread continues using audin-format, leading to a use after free in audioformatcompatible. This vulnerability is fixed in 3.22.0...
CVE-2026-24678
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, A capture thread sends sample responses using a freed channel callback after a device channel close, leading to a use after free in ecamchannelwrite. This vulnerability is fixed in 3.22.0...
CVE-2026-2245
Removed by vendor...
CVE-2026-24683
FreeRDP is a free implementation of the Remote Desktop Protocol. ainputsendinputevent caches channelcallback in a local variable and later uses it without synchronization; a concurrent channel close can free or reinitialize the callback, leading to a use after free. Prior to 3.22.0, This...
CVE-2026-24491
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, videotimer can send client notifications after the control channel is closed, dereferencing a freed callback and triggering a use after free. This vulnerability is fixed in 3.22.0...
GHSA-4J3G-RWWQ-4P54 vulnerabilities
Vulnerabilities for packages: neo4j...
CVE-2025-0395 affecting package glibc for versions less than 2.35-8
CVE-2025-0395 affecting package glibc for versions less than 2.35-8. A patched version of the package is available...
GHSA-3966-F6P6-2QR9 vulnerabilities
Vulnerabilities for packages: code-server, saf, vitess, renovate, npm...
CVE-2025-13473 vulnerabilities
Vulnerabilities for packages: awx, label-studio, authentik-fips, authentik...