5168 matches found
CVE-2026-70368
A stack-based out-of-bounds read vulnerability exists in the "svlog" function of stunnel, when handling oversized log messages via "vsnprintf". A remote attacker with network access to a stunnel service can send protocol inputs that trigger a log message longer than 1024 bytes, leading to an...
golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority CA. A remote attacker could potentially exploit this by presenting a revoked key, leading t...
CVE-2026-18772
Improperly controlled sequential memory allocation vulnerability in Samsung Open Source rlottie allows Exponential Data Expansion...
GHSA-35PC-QWV6-4858 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, gitlab-workhorse-ce-fips, gitlab-runner, gitlab-runner-fips, gitlab-cng, gitlab-cng-fips, gitlab-workhorse-ce, gitlab-rails-ce-fips...
CVE-2026-14351 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, gitlab-workhorse-ce-fips, gitlab-runner, gitlab-runner-fips, gitlab-cng, gitlab-cng-fips, gitlab-workhorse-ce, gitlab-rails-ce-fips...
GHSA-HHF8-3X8G-6PFF vulnerabilities
Vulnerabilities for packages: openjdk...
mariadb: Arbitrary Code Execution via improper parameter validation during State Snapshot Transfer
A flaw was found in MariaDB. During a State Snapshot Transfer SST, the donor node improperly validates parameters sent by a joiner node. This vulnerability allows a malicious joiner to execute arbitrary shell commands on the donor server through the mariabackup SST method. This could lead to a...
CVE-2026-9335
A vulnerability in keras-team/keras versions = 3.14.0 allows arbitrary local HDF5 file content disclosure due to improper handling of HDF5 ExternalLinks. The KerasFileEditor and keras.saving.loadweights functions bypass the safegeth5group and safegeth5dataset helpers, which are designed to reject...
[SECURITY] Fedora 43 Update: rust-libgit2-sys-0.18.7-1.fc43
Native bindings to the libgit2 library...
CVE-2026-54787 vulnerabilities
Vulnerabilities for packages: ko, kubescape, spire-server, kyverno, crossplane, zot, tkn, trivy, neuvector-sigstore-interface, skaffold, falcoctl, aactl, zarf, flux-source-controller, kyverno-notation-aws, policy-controller, tekton-chains, goreleaser, trivy-operator...
CVE-2026-67353
guzzlehttp/guzzle versions before 7.15.1 contain a denial of service vulnerability in the CookieJar that accepts unlimited Set-Cookie header fields with no size restrictions. Attackers can return many large cookies from a malicious server, causing Guzzle to store excessive data in memory and...
CVE-2026-58023 affecting package thrift for versions less than 0.24.0-1
CVE-2026-58023 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-41608 affecting package thrift for versions less than 0.24.0-1
CVE-2026-41608 affecting package thrift for versions less than 0.24.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-53399 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-vmware, linux-qemu, linux-azure, linux-aws...
GHSA-CHX6-HX7R-MCP5 vulnerabilities
Vulnerabilities for packages: vitess...
GHSA-4X4J-2G7C-83W6 vulnerabilities
Vulnerabilities for packages: open-webui, superset, mlflow...
GHSA-6P8H-3WGX-97GF vulnerabilities
Vulnerabilities for packages: mlflow...
CVE-2026-55798 vulnerabilities
Vulnerabilities for packages: open-webui, superset, mlflow...