10156 matches found
GHSA-9QMG-VJ62-G95Q vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-JVCF-79H8-93PM vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-16351 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-16354 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-16363 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-16374 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-16350 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-7RQJ-J65F-68WH vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, langfuse...
SUSE CVE-2026-47780
unknown...
SUSE CVE-2026-48050
Arc is an open, SQL-native time-series database for telemetry. Versions prior to 26.06.1 register Go's net/http/pprof handlers at /debug/pprof/ via app.Usepprof.New in internal/api/server.go, and /debug/pprof is added to PublicPrefixes in cmd/arc/main.go. The auth middleware short-circuits before...
SUSE CVE-2026-49244
SFTPGo is an open source, event-driven file transfer solution. From 2.2.0 until 2.7.3, the public web-client partial ZIP download endpoint for a browsable share validates client-supplied files entries with a raw byte-prefix comparison rather than a directory-boundary-aware check. An unauthenticat...
SUSE CVE-2026-49245
SFTPGo is an open source, event-driven file transfer solution. From 2.2.0 until 2.7.3, the inline query parameter on browsable-share file downloads and authenticated user-file downloads suppresses Content-Disposition: attachment, allowing an attacker-controlled HTML file stored in a share or home...
SUSE CVE-2026-50166
unknown...
SUSE CVE-2026-52878
Klever-Go is the Go implementation of the Klever blockchain protocol. Versions 1.7.14 through 1.7.17 are vulnerable to a nil-pointer panic triggered by a protobuf Transaction whose embedded RawData sub-message is omitted. This omission causes RawData to decode to nil. Every transaction gossiped o...
SUSE CVE-2026-53541
OliveTin gives access to predefined shell commands from a web interface. The filterToDefinedArgumentsOnly function in the executor is intended to discard any arguments not explicitly defined in the action's configuration. However, prior to commit ebffd9f040f791208aee1db2e5a8aecd1e3e603d, a specia...
SUSE CVE-2026-53552
unknown...
SUSE CVE-2026-53604
unknown...
SUSE CVE-2026-53715
unknown...