10213 matches found
GHSA-XJ6V-33Q6-WVXJ vulnerabilities
Vulnerabilities for packages: firefox-esr, firefox...
GHSA-24W5-CQC3-H379 vulnerabilities
Vulnerabilities for packages: firefox-esr, firefox...
CVE-2026-16354 vulnerabilities
Vulnerabilities for packages: firefox-esr, firefox...
CVE-2026-16369 vulnerabilities
Vulnerabilities for packages: firefox-esr, firefox...
CVE-2026-16350 vulnerabilities
Vulnerabilities for packages: firefox-esr, firefox...
GHSA-RJR7-JGGH-PGCP vulnerabilities
Vulnerabilities for packages: kyverno, karma, fluxcd-kustomize-mutating-webhook, telegraf...
CVE-2025-12506 vulnerabilities
Vulnerabilities for packages: gitlab-runner...
SUSE CVE-2026-58059
In Bouncy Castle for Java before 1.85, Quadratic-time escaping when stringifying X.500 distinguished names. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...
SUSE CVE-2026-58061
In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to caller buffer before tag check. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...
SUSE CVE-2026-58216
An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's KDC password change kpasswd service. When processing malformed ASN.1-encoded Kerberos password change request, Samba server miscalculates the structure size and attempts to read up to six bytes beyond the end of th...
SUSE CVE-2026-59645
In Bouncy Castle for Java before 1.85, OER parser recurses without depth limit on self-referential IEEE 1609.2 schema. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcutil-fips 2.0.7 2.0.X series and 2.1.7 2.1.X series...
SUSE CVE-2026-59647
In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours unbounded iteration count. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpkix-fips 1.0.12 1.0.X series, 2.0.12 2.0.X series and 2.1.12 2.1.X series...
SUSE CVE-2026-59652
In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy jdk1.4 LDAPStoreHelper...
CVE-2026-18047
A flaw was found in Dogtag PKI's ACME responder where the web.xml security constraints use exact URL pattern matching for admin-only enable/disable endpoints. By appending a trailing slash to the URL, an unauthenticated attacker can bypass the Tomcat authentication constraint while RESTEasy still...
GHSA-C2RV-HWQM-WJPG vulnerabilities
Vulnerabilities for packages: opensearch...
CVE-2026-13676 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard-fips, kibana, unleash-proxy, keep, argo-workflows, prism, vitess, arangodb, commercial-gitlab-rails-ee-fips, wazuh-dashboard, jupyter-base-notebook, gitlab-rails-ce, yaml-language-server, keep-fips, gitlab-rails-ce-fips, opensearch-dashboards-fips,...
CVE-2026-64554
In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: fix stale prevhdr pointer in brip6fragment brip6fragment gets prevhdr, a pointer into the skb head, from ip6find1stfragopt, then calls skbchecksumhelp. For a cloned skb skbchecksumhelp reallocates the head via...
CVE-2026-66053
Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue. This replaces CVE-2026-41603...
