3408 matches found
CVE-2026-33983
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, progressivedecompresstileupgrade detects a mismatch via progressiverfxquantcmpequal but only emits WLogWARN, execution continues. The wrapped value 247 is used as a shift exponent, causing undefined behavior...
GHSA-X744-4WPC-V9H2 vulnerabilities
Vulnerabilities for packages: chainloop-control-plane, gatekeeper, chainloop-control-plane-fips, amazon-cloudwatch-agent-operator, buildah, commercial-grafana, datadog-agent, rancher, newrelic-infrastructure-agent-fips, cluster-api-fips, harvester-fips, harvester, aws-otel-collector, kubedock-fip...
CVE-2026-33672 vulnerabilities
Vulnerabilities for packages: argo-workflows, rancher-api-ui, vite, nextcloud-server, pulumi, tileserver-gl, npm, prism, kubeflow-pipelines, code-server, ts-patch, vitess, renovate, sqlpad, opensearch-dashboards, node-gyp, saf, lerna, kubeflow-katib...
CVE-2026-4697 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-CJ36-HXHV-2QXH vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-X3F3-63G4-54J4 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-6956-6R33-F8XW vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-5CGM-H8QG-5H77 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-CR5G-9FRG-Q8M8 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-VXPV-C2H6-HQ9V vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
CVE-2026-4696 vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
GHSA-MRRG-439G-X65P vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
CVE-2025-59028
When sending invalid base64 SASL data, login process is disconnected from the auth server, causing all active authentication sessions to fail. Invalid BASE64 data can be used to DoS a vulnerable server to break concurrent logins. Install fixed version or disable concurrency in login processes hea...
GHSA-3C37-WWVX-H642 vulnerabilities
Vulnerabilities for packages: py3-cbor2, tritonserver-backend-vllm-cuda-13.0, tritonserver-backend-vllm-cuda-12.9, localstack, vllm-openai-cuda-12.9, py3-vllm-cuda-12.4...
ROS-20260327-73-0009
Vulnerability in openbabel related to an operation exceeding buffer boundaries in memory. The vulnerability can be exploited remotely...
CVE-2026-33699
pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.2 have a vulnerability in which an attacker can craft a PDF which leads to an infinite loop. This requires reading a file in non-strict mode. This has been fixed in pypdf 6.9.2. If users cannot upgrade yet, consider...
CVE-2026-25645 vulnerabilities
Vulnerabilities for packages: semgrep, ggshield, az, pypy-3.10, pypy-3.11, jwt-tool, py3-pipenv, kubeflow-pipelines, kubeflow-volumes-web-app, datadog-agent, kserve, py3-pip, airflow, dask-kubernetes, superset, py3-cassandra-medusa, jupyter-base-notebook, k8s-sidecar, confluent-docker-utils,...
GHSA-GFWX-W7GR-FVH7 vulnerabilities
Vulnerabilities for packages: py3-nltk, open-webui, kubeflow-pipelines-visualization-server...
GHSA-JM6W-M3J8-898G vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-nltk, apache-beam-python-3.11-sdk, apache-beam-python-3.12-sdk, nemo, open-webui, apache-beam-python-3.13-sdk, label-studio...