10127 matches found
CVE-2025-56005
An undocumented and unsafe feature in the PLY Python Lex-Yacc library 3.11 allows Remote Code Execution RCE via the picklefile parameter in the yacc function. This parameter accepts a .pkl file that is deserialized with pickle.load without validation. Because pickle allows execution of embedded...
CVE-2026-22797
An issue was discovered in OpenStack keystonemiddleware 10.5 through 10.7 before 10.7.2, 10.8 and 10.9 before 10.9.1, and 10.10 through 10.12 before 10.12.1. The externaloauth2token middleware fails to sanitize incoming authentication headers before processing OAuth 2.0 tokens. By sending forged...
CVE-2025-68664 vulnerabilities
Vulnerabilities for packages: py3-langchain...
GHSA-XRWG-MQJ6-6M22 vulnerabilities
Vulnerabilities for packages: datadog-agent-fips, tigera-operator, datadog-agent...
SUSE CVE-2025-61726
The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the maximum request header size, the net/http.Request.ParseForm method can parse large URL-encoded forms. Parsing a large form containi...
SUSE CVE-2025-61728
archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened. This can lead to a denial of service when consuming a maliciously constructed ZIP archive...
CVE-2025-43904
In SchedMD Slurm before 24.11.5, 24.05.8, and 23.11.11, the accounting system can allow a Coordinator to promote a user to Administrator...
CVE-2025-51602
mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01 response from an MMS server...
CVE-2025-31510
In the portal in LemonLDAP::NG before 2.21.0, cross-site scripting XSS allows remote attackers to inject arbitrary web script or HTML into the login page via the tab parameter, for Choice authentication...
CVE-2026-23519 vulnerabilities
Vulnerabilities for packages: yazi...
CVE-2025-51602
mmstu.c in VideoLAN VLC media player before 3.0.22 allows an out-of-bounds read and denial of service via a crafted 0x01 response from an MMS server...
CVE-2025-24531
In OpenSC pampkcs11 before 0.6.13, pamsmauthenticate wrongly returns PAMIGNORE in many error situations such as an error triggered by a smartcard before login, allowing authentication bypass...
CVE-2012-2339 vulnerabilities
Vulnerabilities for packages: drupal...
CVE-2009-1047 vulnerabilities
Vulnerabilities for packages: drupal...
GHSA-HGF8-PV4W-P39V vulnerabilities
Vulnerabilities for packages: drupal...
CVE-2009-3156 vulnerabilities
Vulnerabilities for packages: drupal...
GHSA-H4QQ-2J4V-765M vulnerabilities
Vulnerabilities for packages: drupal...
GHSA-8H7R-J823-HW2Q vulnerabilities
Vulnerabilities for packages: drupal...