3407 matches found
CVE-2026-12617
The issue is unexpected program termination based on ordering and/or specific content in responses to queries for CNAME or DNAME, and A records. Specifically, if a client queries for a DNAME and A record below the DNAME to the resolver, and the authoritative server responds positively to the A...
CVE-2026-59200 vulnerabilities
Vulnerabilities for packages: superset-fips, mlflow, superset, openstack-horizon-2026.1-fips, tritonserver-backend-vllm-cuda-13.0, open-webui, openstack-horizon-2025.2-fips, text-generation-inference, lmcache-cuda-12.8, label-studio, tensorflow-gpu-jupyter, openstack-horizon-2025.2,...
CVE-2026-52869 vulnerabilities
Vulnerabilities for packages: litellm, semgrep...
CVE-2026-13149 vulnerabilities
Vulnerabilities for packages: serve, graalvm, opensearch-dashboards, lerna, ts-patch, rancher-api-ui, wazuh-dashboard-fips, unleash-fips, saf, pulumi, kibana, wazuh-dashboard, nextcloud-server, prism, azurite, sqlpad, gitlab-rails-ce-fips, authentik-fips, opensearch-dashboards-fips, authentik,...
CVE-2026-39244 vulnerabilities
Vulnerabilities for packages: kibana, redisinsight, sqlpad...
CVE-2026-44227
RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 and above, prior to 6.0.3 contain a reflected Cross-Site Scripting XSS vulnerability. An attacker who can induce an authenticated RT user to visit a crafted URL can execute arbitrary JavaScript in that user's...
dotnet: .NET Framework: Denial of Service via improper input validation
A flaw was found in .NET Framework. This improper validation of input allows an unauthorized attacker to remotely deny service over a network. This vulnerability can lead to a Denial of Service DoS condition, making the affected system unavailable to legitimate users...
CVE-2026-64155
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix error path leaks in some WMI WOW calls Fix two instances where we used to directly return the result of ath11kwmicmdsend.... Because we did not check the return value, we also did not free the skb in the error...
CVE-2026-15902
Use after free in Cast in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-63889
In the Linux kernel, the following vulnerability has been resolved: scsi: scsitransportfc: Widen FPIN pname walker counter to u32 An adjacent Fibre Channel fabric actor that can deliver an FPIN ELS frame to an lpfc or qla2xxx Linux initiator can trigger a non-return in the generic FC transport...
CVE-2026-63805
In the Linux kernel, the following vulnerability has been resolved: crypto: nx - fix nxcryptoctxexit argument nxcryptoctxshashexit calls nxcryptoctxexit with cryptoshashctx... but cryptoshashctx gives a nxcryptoctx , not a cryptotfm . Fix the type in nxcryptoctxexit and drop the bogus cryptotfmct...
CVE-2026-13221 vulnerabilities
Vulnerabilities for packages: perl...
GHSA-HGVH-MHW9-C77H vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-GC92-VPV6-2C4W vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-PH5F-PJVP-H9X6 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-25XW-CF43-5CCV vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-13221 vulnerabilities
Vulnerabilities for packages: perl...
GHSA-5G35-5JRJ-F39P vulnerabilities
Vulnerabilities for packages: perl...