3407 matches found
CVE-2026-48711
SSHFS is a network filesystem client for connecting to SSH servers. From version 1.4 until 3.7.6, SSHFS accepts a bracketed mount source such as -oProxyCommand=CMD:/path and findbasepath removes the brackets, leaving a host value that begins with - and is passed directly to ssh as a command-line...
CVE-2026-70456
rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the readargs function that allows a malicious sender to corrupt adjacent heap memory by sending a crafted argument list. When the argument count causes the argv allocation to be exactly full, the trailing NULL terminator is...
CVE-2026-53785
rsync before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to write files outside the intended destination directory tree by crafting relative paths with symlink components in --relative mode. The makepath function follows symlinks pointing outside the destination...
GHSA-WVPP-8HX9-P66J vulnerabilities
Vulnerabilities for packages: checkov, awx, opal...
GHSA-HH9P-6WH2-4MFC vulnerabilities
Vulnerabilities for packages: checkov...
GHSA-4GMW-GG2M-W46P vulnerabilities
Vulnerabilities for packages: checkov...
CVE-2026-45021 vulnerabilities
Vulnerabilities for packages: kuma...
GHSA-RHH3-JPG6-66XH vulnerabilities
Vulnerabilities for packages: langfuse, langfuse-fips...
GHSA-W737-WX49-QJ23 vulnerabilities
Vulnerabilities for packages: dependency-track, keycloak, infinispan, zipkin, apicurio-registry...
CVE-2026-56847 vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2026-12061 vulnerabilities
Vulnerabilities for packages: open-webui, nemo...
CVE-2026-12075 vulnerabilities
Vulnerabilities for packages: open-webui, nemo...
CVE-2026-68480
In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Make Safe-RET robust against interrupt injection An attacker injecting interrupts while the Safe-RET mitigation executes on machines affected by SRSO can neutralize the safe return sequence, potentially leading to data...
CVE-2025-49506
APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timing attack particularly on platforms without crypt such as Windows, BeOS, NetWare, or Android. Users are...
CVE-2026-64591
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid WARNING in sva unbind path The Intel IOMMU driver allows SVA on devices even if they do not support PCI/PRI. Commit 39c20c4e83b9 "iommu/vt-d: Only handle IOPF for SVA when PRI is supported" modified the SVA bind...
GHSA-X4CW-WG5H-4QX6 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-X743-XHCC-5XQF vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-PV4W-F6R6-3QCW vulnerabilities
Vulnerabilities for packages: chromium...