10171 matches found
CVE-2026-46633 vulnerabilities
Vulnerabilities for packages: drupal...
CVE-2026-41076
RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.9 and prior in addition to 6.0.0 through 6.0.2 contain an authentication bypass vulnerability in RT installations that use LDAP/AD for user authentication. Under certain LDAP server configurations, an attacker m...
CVE-2026-42154 vulnerabilities
Vulnerabilities for packages: node-problem-detector, tempo, grafana, trillian, cloud-sql-proxy, datadog-agent, karma, opentelemetry-collector, jaeger, istio, prometheus, splunk-otel-collector, loki, minio, certificate-transparency, mc, aws-otel-collector, prometheus-operator, keda,...
GHSA-58QX-3VCG-4XPX vulnerabilities
Vulnerabilities for packages: py3-jupyterlab, opensearch-dashboards, argo-workflows, langfuse, code-server, kubeflow-katib, vitess, kubeflow-pipelines...
CVE-2026-25680
Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...
SUSE CVE-2026-47254
libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, Track::initsampletimingtable in libheif/sequences/track.cc stores an out-of-bounds chunk index mchunks.size into mpresentationtimeline when the number of chunks defined in the stco box is less than the number of...
SUSE CVE-2026-48029
libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.19.0 through 1.21.2 have a heap OOB read in ImageItemGrid::decodegridtile via irot-induced tile-coordinate underflow. Version 1.22.0 fixes the issue...
CVE-2026-3260 vulnerabilities
Vulnerabilities for packages: wildfly...
GHSA-5WFC-HJRC-GQ87 vulnerabilities
Vulnerabilities for packages: jitsucom-bulker...
CVE-2023-34620 vulnerabilities
Vulnerabilities for packages: jitsucom-bulker...
CVE-2026-8953 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-Q9P7-4943-M5GR vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-6FHV-H367-4JC4 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-5WFC-HJRC-GQ87 vulnerabilities
Vulnerabilities for packages: jitsucom-bulker...
GHSA-Q9P7-4943-M5GR vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
CVE-2026-8953 vulnerabilities
Vulnerabilities for packages: firefox, firefox-esr...
SUSE CVE-2026-44049
An out-of-bounds write due to improper null termination in convertcharset in Netatalk 2.0.4 through 4.4.2 allows a remote authenticated attacker to execute arbitrary code or cause a denial of service via crafted character data...
CVE-2026-43495
In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: validate portcount against message length in t7xxportenummsghandler t7xxportenummsghandler uses the modem-supplied portcount field as a loop bound over portmsg-data without checking that the message buffer contai...
CVE-2026-6841
Request Tracker is vulnerable to a reflected cross-site scripting XSS vulnerability via the "Page" parameter in GET requests. An attacker can craft a URL that, when opened, results in arbitrary JavaScript execution in the victim’s browser. This vulnerability affects versions from 5.0.4 up to 5.0....