10171 matches found
SUSE CVE-2026-34268
unknown...
SUSE CVE-2026-41051
csync2 uses insecure temporary directories when compiled with C99 or later, allowing for TOCTOU style attacks on the temporary directories...
CVE-2026-40924 vulnerabilities
Vulnerabilities for packages: tekton-pipelines-fips, tkn-fips, tekton-chains-fips, tkn, tekton-chains, tekton-pipelines...
CVE-2026-41564
CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking. The Crypt::PK::RSA, Crypt::PK::DSA, Crypt::PK::DH, Crypt::PK::ECC, Crypt::PK::Ed25519 and Crypt::PK::X25519 modules seed a per-object PRNG state in their constructors and reuse it without fork detection. A...
CVE-2026-41651
PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a cross-distro, cross-architecture API. PackageKit between and including versions 1.0.2 and 1.3.4 is vulnerable to a time-of-check time-of-use TOCTOU race condition on transaction flags that...
CVE-2026-5744
hw/uefi: heap overflow...
CVE-2026-2332 vulnerabilities
Vulnerabilities for packages: apache-nifi, druid, solr, apache-tika, jenkins, apache-pulsar, akhq, kafka, cloudwatch-exporter, trino, strimzi-kafka-operator, cassandra-reaper...
GHSA-VFMQ-68HX-4JFW vulnerabilities
Vulnerabilities for packages: awx, datadog-agent, authentik-fips, datahub-ingestion, datahub-ingestion-fips, datadog-agent-fips, airflow, kubeflow-pipelines-visualization-server, nemo, label-studio, synapse, authentik, open-webui...
CVE-2026-35368
A vulnerability exists in the chroot utility of uutils coreutils when using the --userspec option. The utility resolves the user specification via getpwnam after entering the chroot but before dropping root privileges. On glibc-based systems, this can trigger the Name Service Switch NSS to load...
CVE-2026-6861
A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG Scalable Vector Graphics CSS Cascading Style Sheets data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may lead to a denial...
CVE-2026-31503
In the Linux kernel, the following vulnerability has been resolved: udp: Fix wildcard bind conflict check when using hash2 When binding a udpsock to a local address and port, UDP uses two hashes udptable-hash and udptable-hash2 for collision detection. The current code switches to "hash2" when...
CVE-2026-33597
PRSD detection denial of service...
CVE-2026-35331
Accepting Certificates Violating Name Constraints...
CVE-2026-35329
NULL-Pointer Dereference When Processing Padding in PKCS7...
CVE-2026-33257
An attacker can send a web request that causes unlimited memory allocation in the internal web server, leading to a denial of service. The internal web server is disabled by default...
CVE-2026-6846
A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF Extended Common Object File Format object file during linking. A local attacker could trick a user into processing this malicious file, which could lead to arbitrary code execution,...
GHSA-6WGR-89RJ-399P vulnerabilities
Vulnerabilities for packages: yara-x, zed, wasmcloud, wizer...
CVE-2026-34983 vulnerabilities
Vulnerabilities for packages: wasmcloud...