10171 matches found
GHSA-CG4J-Q9V8-6V38 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, ruby3.2-rails, ruby3.4-rails, cinc-auditor, kube-fluentd-operator, gitlab-rails-ce-fips, gitlab-rails-ce...
CVE-2026-33174 vulnerabilities
Vulnerabilities for packages: ruby3.2-rails...
CVE-2026-33176 vulnerabilities
Vulnerabilities for packages: cinc-auditor, ruby3.2-rails, kube-fluentd-operator, kube-logging-operator...
CVE-2026-3591
A use-after-return vulnerability exists in the named server when handling DNS queries signed with SIG0. Using a specially-crafted DNS request, an attacker may be able to cause an ACL to improperly mismatch an IP address. In a default-allow ACL denying only specific IP addresses, this may lead to...
CVE-2026-33412
Vim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob function on Unix-like systems. By including a newline character \n in a pattern passed to glob, an attacker may be able to execute arbitrary shell commands. This...
CVE-2026-27784
The 32-bit implementation of NGINX Open Source has a vulnerability in the ngxhttpmp4module module, which might allow an attacker to over-read or over-write NGINX worker memory resulting in its termination, using a specially crafted MP4 file. The issue only affects 32-bit NGINX Open Source if it i...
CVE-2026-33056 vulnerabilities
Vulnerabilities for packages: qdrant, rustup, wasmcloud, zizmor, pixi, wasm-pack, rye, cargo-c, deno, sccache, buck2...
CVE-2026-33250
Freeciv21 is a free open source, turn-based, empire-building strategy game. Versions prior to 3.1.1 crash with a stack overflow when receiving specially-crafted packets. A remote attacker can use this to take down any public server. A malicious server can use this to crash the game on the player'...
GHSA-GCHP-Q4R4-X4FF vulnerabilities
Vulnerabilities for packages: typst, pixi, fnm, rustup, sccache, wasm-pack, zizmor, wasmcloud, qdrant, buck2, rye, mise, deno, cargo-c, bootc...
CVE-2026-33481 vulnerabilities
Vulnerabilities for packages: wolfictl, kubescape, guac, kubescape-operator, zarf, k9s, xeol...
GHSA-QPXP-75PX-XJCP vulnerabilities
Vulnerabilities for packages: open-webui, litellm...
cpython: POP3 command injection in user-controlled commands
A flaw was found in the poplib module in the Python standard library. The poplib module does not reject control characters, such as newlines, in user-controlled input passed to POP3 commands. This issue allows an attacker to inject additional commands to be executed in the POP3 server...
CVE-2026-33349 vulnerabilities
Vulnerabilities for packages: langfuse, renovate, prism, kubeflow-pipelines, tileserver-gl, saf...
CVE-2026-27980 vulnerabilities
Vulnerabilities for packages: langfuse, jitsucom-jitsu...
CVE-2026-30836 vulnerabilities
Vulnerabilities for packages: caddy...
CVE-2026-33155 vulnerabilities
Vulnerabilities for packages: localstack, dbt-bigquery, dbt-snowflake, dbt-core...
CVE-2026-33154 vulnerabilities
Vulnerabilities for packages: awx...
GHSA-PCGW-QCV5-H8CH vulnerabilities
Vulnerabilities for packages: neuvector-fips, teleport, neuvector, teleport-operator-fips...