5641 matches found
CVE-2026-70354
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...
firefox: thunderbird: Site isolation issue in the Graphics: WebRender component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Graphics: WebRender component...
ROS-20260810-73-0023
The vulnerability in gpac is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260810-73-0024
The vulnerability in gpac is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260810-73-0004
The vulnerability of the JAXP component in the Oracle Java SE software platform and the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to...
ROS-20260810-73-0022
The vulnerability in gpac is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
libarchive security update
3.7.7-10 - Related: CVE-2026-14164 3.7.7-9 - Resolves: CVE-2026-14164...
GHSA-9RJ7-RF2P-W77R vulnerabilities
Vulnerabilities for packages: mlflow, checkov...
GHSA-WVPP-8HX9-P66J vulnerabilities
Vulnerabilities for packages: mlflow, checkov...
GHSA-2V37-7H3G-55P8 vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, homepage, json-server, pelias-api, gitlab-rails-ce-fips, authentik, langfuse-fips, dotstatsuite-supercore, nextcloud-server, unleash-fips, jitsucom-jitsu, gitlab-rails-ce, keep, keep-fips, renovate, jupyter-base-notebook,...
SUSE CVE-2026-19167
Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...
SUSE CVE-2026-19173
Out of bounds write in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
GHSA-2V8P-3F2J-5MP7 vulnerabilities
Vulnerabilities for packages: langfuse-fips, langfuse, commercial-gitlab-rails-ee-fips, gitlab-rails-ce, commercial-gitlab-rails-ee, jupyter-base-notebook, tensorflow-gpu-jupyter, gitlab-rails-ce-fips...
GHSA-C4C3-PG64-4M4V vulnerabilities
Vulnerabilities for packages: langfuse-fips, langfuse, commercial-gitlab-rails-ee-fips, gitlab-rails-ce, commercial-gitlab-rails-ee, jupyter-base-notebook, tensorflow-gpu-jupyter, gitlab-rails-ce-fips...
GHSA-G3PR-3P32-FP23 vulnerabilities
Vulnerabilities for packages: zipkin, dependency-track, apicurio-registry, infinispan, keycloak...
GHSA-PMHH-3W7G-XQP8 vulnerabilities
Vulnerabilities for packages: apache-tika, spdx-tools-java, nextflow, opensearch, gradle...
CVE-2026-56818
Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, the RedisArrayAggregator Redis codec clears retained partial aggregate state when the maxNestedArrayDepth limit is exceeded, but it does not clear the same state when the sibling...
SUSE CVE-2026-43622
llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper where new1batch allocates memory using malloc while free1batch deallocates it using the C++ delete operator, causing heap metadata corruption. Attackers can trigger this memory management...