5222 matches found
ROS-20260319-73-0007
Vulnerability in glpi related to failure to take measures to protect sql query structure. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...
ROS-20260319-73-0034
Vulnerability in beats related to writing outside buffer boundaries in memory. Exploitation of the vulnerability may allow an attacker to execute arbitrary code...
CVE-2026-31969
HTSlib is a library for reading and writing bioinformatics file formats. CRAM is a compressed format which stores DNA sequence alignment data using a variety of encodings and compression methods. When reading data encoded using the BYTEARRAYSTOP method, an out-by-one error in the...
CVE-2026-29777 vulnerabilities
Vulnerabilities for packages: traefik, traefik-fips...
CVE-2026-23943 affecting package erlang for versions less than 25.3.2.21-5
CVE-2026-23943 affecting package erlang for versions less than 25.3.2.21-5. A patched version of the package is available...
CVE-2026-23942 affecting package erlang for versions less than 25.3.2.21-5
CVE-2026-23942 affecting package erlang for versions less than 25.3.2.21-5. A patched version of the package is available...
CVE-2025-10966 affecting package cmake for versions less than 3.21.4-22
CVE-2025-10966 affecting package cmake for versions less than 3.21.4-22. A patched version of the package is available...
CVE-2026-23246
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: bounds-check linkid in ieee80211mlreconfiguration linkid is taken from the ML Reconfiguration element control & 0x000f, so it can be 0..15. linkremovaltimeout has IEEE80211MLDMAXNUMLINKS 15 elements, so index 15 i...
CVE-2026-23244
In the Linux kernel, the following vulnerability has been resolved: nvme: fix memory allocation in nvmeprreadkeys nvmeprreadkeys takes numkeys from userspace and uses it to calculate the allocation size for rse via structsize. The upper limit is PRKEYSMAX 64K. A malicious or buggy userspace can...
GHSA-JR27-M4P2-RC6R vulnerabilities
Vulnerabilities for packages: gitlab-cng, keep-fips, kubeflow-jupyter-web-app, apache-beam-python-3.12-sdk, ansible-operator, apache-beam-python-3.13-sdk, request-1276, mlflow, kubeflow-pipelines-visualization-server, ansible-operator-fips, authentik, authentik-fips, dbt-bigquery,...
GHSA-QJXF-F2MG-C6MC vulnerabilities
Vulnerabilities for packages: mitmproxy, dask-kubernetes, airflow, kubeflow-pipelines-visualization-server...
CVE-2026-26740
Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size...
CVE-2026-4271
A flaw was found in libsoup, a library for handling HTTP requests. This vulnerability, known as a Use-After-Free, occurs in the HTTP/2 server implementation. A remote attacker can exploit this by sending specially crafted HTTP/2 requests that cause authentication failures. This can lead to the...
GHSA-GMQ8-994R-JV83 vulnerabilities
Vulnerabilities for packages: code-server, renovate, opensearch-dashboards...
CVE-2026-3644
The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete. The Morsel.update, |= operator, and unpickling paths were not patched, allowing control characters to bypass input validation. Additionally, BaseCookie.jsoutput lacked the output validation applie...
CVE-2026-3916 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-GC25-M8G6-JP4F vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-3924 vulnerabilities
Vulnerabilities for packages: chromium...