5172 matches found
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass the same-origin policy through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform out-of-bounds memory access via a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in Fenced Frames in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted inputs in the WebUI of Google Chrome before version 150.0.7871.47 allowed a remote attacker to leak cross-origin data through malicious network traffic. Chromium security severity: Medium...
GHSA-9WJQ-CP2P-HRGF vulnerabilities
Vulnerabilities for packages: pghero, ruby3.2-rails, pghero-fips, ruby3.4-rails, ruby3.3-rails, ruby4.0-rails...
GHSA-8WHX-365G-H9VV vulnerabilities
Vulnerabilities for packages: pghero, ruby3.2-rails, pghero-fips, ruby3.4-rails, ruby3.3-rails, ruby4.0-rails...
GHSA-XVCM-6775-5M9R vulnerabilities
Vulnerabilities for packages: arangodb, nextcloud-server, rancher-api-ui, keep, authentik-fips, vitess, authentik, keep-fips...
GHSA-HM4W-WWCW-MR6R vulnerabilities
Vulnerabilities for packages: openstack-keystone-2026.1, superset, wazuh-manager, openstack-keystone-2025.2-fips, gitlab-cng, datahub-ingestion, datadog-agent-fips, kubeflow-pipelines-visualization-server, apache-beam-python-3.12-sdk, datadog-agent, kubeflow, kubeflow-pipelines,...
GHSA-H668-6X6G-F8R5 vulnerabilities
Vulnerabilities for packages: ascan...
GHSA-RWJ8-PGH3-R573 vulnerabilities
Vulnerabilities for packages: checkov, mlflow...
Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize
A flaw was found in Little CMS. An integer overflow in the CubeSize function within cmslut.c occurs because the overflow check is performed after the multiplication. An attacker could exploit this vulnerability by providing a specially crafted input, potentially leading to information disclosure ...
[SECURITY] Fedora 44 Update: nginx-mod-brotli-1.0.0~rc-13.fc44
NGINX module for Brotli compression...
CVE-2026-60081 affecting package perl-DBI for versions less than 1.651-1
CVE-2026-60081 affecting package perl-DBI for versions less than 1.651-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-8286 affecting package cmake for versions less than 3.30.3-15
CVE-2026-8286 affecting package cmake for versions less than 3.30.3-15. A patched version of the package is available...
CVE-2026-11856 affecting package cmake for versions less than 3.30.3-15
CVE-2026-11856 affecting package cmake for versions less than 3.30.3-15. A patched version of the package is available...
GHSA-4J6X-2764-M8GH vulnerabilities
Vulnerabilities for packages: harvester-fips, harvester...
GHSA-VX8H-4PRV-G744 vulnerabilities
Vulnerabilities for packages: harvester-fips, harvester...
CVE-2026-59869 vulnerabilities
Vulnerabilities for packages: sqlpad, kubeflow-centraldashboard, ts-patch, opensearch-dashboards, code-server, lerna, pulumi, prism, eslint, vitess...