CVE-2021-47638

In the Linux kernel, the following vulnerability has been resolved: ubifs: renamewhiteout: Fix double free for whiteoutui-data 'whiteoutui-data' will be freed twice if space budget fail for rename whiteout operation as following process: renamewhiteout dev = kmalloc whiteoutui-data = dev...

CVE-2021-47654

In the Linux kernel, the following vulnerability has been resolved: samples/landlock: Fix pathlist memory leak Clang static analysis reports this error sandboxer.c:134:8: warning: Potential leak of memory pointed to by 'pathlist' ret = 0; ^ pathlist is allocated in parsepath but never freed...

CVE-2021-47659

In the Linux kernel, the following vulnerability has been resolved: drm/plane: Move range check for formatcount earlier While the check for formatcount 64 in drmuniversalplaneinit shouldn't be hit it's a WARNON, in its current position it will then leak the plane-formattypes array and fail to cal...

ROS-20250226-08

A vulnerability in the OpenJPEG image encoding and decoding library is related to memory boundary errors. memory boundary errors. Exploitation of the vulnerability could allow an attacker to execute arbitrary code A vulnerability in the OpenJPEG image encoding and decoding library is related to a...

CVE-2025-27148

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. On Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. This library initialization could be...

CVE-2025-21627

GLPI is a free asset and IT management software package. In versions prior to 10.0.18, a malicious link can be crafted to perform a reflected XSS attack on the search page. If the anonymous ticket creation is enabled, this attack can be performed by an unauthenticated user. Version 10.0.18 contai...

CVE-2025-1176 affecting package binutils for versions less than 2.41-3

CVE-2025-1176 affecting package binutils for versions less than 2.41-3. A patched version of the package is available...

GHSA-8JGF-8R3G-HXH8 vulnerabilities

Vulnerabilities for packages: haproxy...

GHSA-F73R-7G7H-494M vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-cng...

GHSA-X774-V4VM-3H8M vulnerabilities

Vulnerabilities for packages: gitlab-pages, gitlab-cng...

GHSA-VP7M-M4V3-GXC5 vulnerabilities

Vulnerabilities for packages: openjdk...

GHSA-C42G-RMXF-64CH vulnerabilities

Vulnerabilities for packages: curl...

GHSA-M77W-6VJW-WH2F vulnerabilities

Vulnerabilities for packages: glibc...

GHSA-XC82-5M89-G4JV vulnerabilities

Vulnerabilities for packages: kind, kubeflow-katib, go...

GHSA-QF54-2QX8-3VCV vulnerabilities

Vulnerabilities for packages: libspf2, exim...

GHSA-G9M4-VFQ7-W439 vulnerabilities

Vulnerabilities for packages: ghostscript...

GHSA-HJ65-9WFC-JMF4 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-F666-246M-P7MG vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-QP3J-RXH4-Q4H8 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-8XFX-RJ4P-23JM vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui, ko, nri-elasticsearch, k8sgpt-operator, victoriametrics-operator, go-licenses, sops, kine, wire-go, minio-operator, velero-plugin-for-csi, kube-bench, mongo-tools, crossplane-provider-family-azure, shfmt, nri-couchbase,...