592 matches found
ROS-20260701-73-0040
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
GHSA-Q9J8-24P8-JQ8J vulnerabilities
Vulnerabilities for packages: gitlab-runner...
mariadb: MariaDB: Privilege bypass allows unauthorized file write via subqueries
A flaw was found in MariaDB server. This vulnerability allows a low-privileged authenticated user to bypass a security control that normally restricts file operations. Specifically, the system failed to verify the necessary 'FILE' privilege when certain 'SELECT' statements, which write data to...
GHSA-4MR2-FG2P-W63C vulnerabilities
Vulnerabilities for packages: traefik, traefik-fips...
GHSA-3M6Q-JJ5J-38C9 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, ruby3.3-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset...
CVE-2026-6092
When HAVEENCRYPTTHENMAC is configured, the implementation could fall back to MAC-then-Encrypt rather than enforcing Encrypt-then-MAC...
CVE-2026-6092
When HAVEENCRYPTTHENMAC is configured, the implementation could fall back to MAC-then-Encrypt rather than enforcing Encrypt-then-MAC...
CVE-2026-53225
In the Linux kernel, the following vulnerability has been resolved: sctp: fix uninit-value in sctprcvasconflookup sctprcvasconflookup in net/sctp/input.c only checks that the ASCONF chunk can hold the ADDIP header and a parameter header, then calls af-fromaddrparam, which reads the full address 1...
CVE-2026-53197
In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: fix ABBA deadlock in iptfsdestroystate iptfsdestroystate calls hrtimercancel while holding a spinlock that the timer callback also acquires, leading to an ABBA deadlock on SMP systems. For the output timer iptfstimer...
CVE-2026-12246
NSD version 4.14.0 introduced a bug where a specially crafted APL RR, with an adflength larger than permitted for the address family will overwrite the stack when the zone is written to disk, with a maximum of 111 attacker controlled bytes...
CVE-2026-54516 vulnerabilities
Vulnerabilities for packages: logstash-fips, spdx-tools-java, akhq, druid, management-api-for-apache-cassandra-4.0, confluent-kafka-jre-bcfips, kafbat-ui, pinot, keycloak-fips, apache-activemq, sonarqube, neo4j, apache-activemq-fips, jenkins-plugin-manager, logstash, apache-nifi, apache-tomee,...
CVE-2025-62879 vulnerabilities
Vulnerabilities for packages: backup-restore-operator, backup-restore-operator-fips...
GHSA-FCW5-X6J4-CCMP vulnerabilities
Vulnerabilities for packages: tensorflow-cpu-jupyter...
GHSA-WXV8-W48J-R2F4 vulnerabilities
Vulnerabilities for packages: python...
ROS-20260617-73-0007
The vulnerability in ImageMagick is related to the lack of memory release after the effective lifespan of the component. Exploiting this vulnerability can allow an attacker to cause a service failure...
GHSA-4FVR-RGM6-GQMC vulnerabilities
Vulnerabilities for packages: airflow-core, tritonserver-backend-vllm-cuda-13.0, dask-kubernetes-fips, authentik, metaflow-service-fips, tritonserver-backend-vllm-cuda-12.9, py3-vllm-cuda-12.9, apache-beam-python-3.12-sdk, apache-beam-python-3.11-sdk, py3-vllm-cuda-12.4, request-1276,...
GHSA-4M7W-QMGQ-4WJ5 vulnerabilities
Vulnerabilities for packages: airflow-core, tritonserver-backend-vllm-cuda-13.0, dask-kubernetes-fips, authentik, metaflow-service-fips, tritonserver-backend-vllm-cuda-12.9, py3-vllm-cuda-12.9, apache-beam-python-3.12-sdk, apache-beam-python-3.11-sdk, py3-vllm-cuda-12.4, request-1276,...
python-idna: idna: Denial of Service via specially crafted long inputs
A flaw was found in the idna library, which handles Internationalized Domain Names in Python applications. A remote attacker could exploit this vulnerability by sending specially crafted, excessively long inputs to the library's encoding function. This could cause the system to consume significan...
