10213 matches found
CVE-2026-56822 vulnerabilities
Vulnerabilities for packages: cassandra, thingsboard, management-api-for-apache-cassandra-5.0, tez...
CVE-2026-55833 vulnerabilities
Vulnerabilities for packages: akhq, apache-activemq-artemis, opensearch, keycloak, zipkin, tez, spark, apache-pulsar, management-api-for-apache-cassandra-5.0, infinispan, celeborn, kserve-modelmesh, thingsboard, neo4j, strimzi-kafka-operator, cloudwatch-exporter, druid, flyway, wavefront-proxy,...
CVE-2026-66141
Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...
CVE-2026-66141
Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...
SUSE CVE-2026-10050
In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specification for HTTP did not specify explicitly a charset, and it was assumed to be ISO-8859-1 for historical reasons. If the password contains...
SUSE CVE-2026-52688
RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...
CVE-2026-53600 vulnerabilities
Vulnerabilities for packages: zed...
GHSA-89XV-2M56-2M9X vulnerabilities
Vulnerabilities for packages: peerdb-ui, homepage, keep, jitsucom-jitsu, keep-fips, langfuse-fips, langfuse...
GHSA-R7WM-3CXJ-WFF9 vulnerabilities
Vulnerabilities for packages: akhq, opensearch, gradle, keycloak, tez, spark, apache-tika, keycloak-config-cli, sonarqube, infinispan, apache-nifi-registry, spdx-tools-java, wildfly, dependency-track, strimzi-kafka-operator, flyway, scala, cass-config-builder, apache-nifi, apicurio-registry, trin...
GHSA-V56Q-MH7H-F735 vulnerabilities
Vulnerabilities for packages: rancher-api-ui, nextcloud-server, argo-workflows, vitess...
GHSA-5QHF-9PHG-95M2 vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, ruby3.4-rails, ruby4.0-rails...
CVE-2026-59880 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, vitess, keep, keep-fips, rancher-api-ui, argo-workflows, gitlab-rails-ce-fips, arangodb, nextcloud-server, authentik-fips, authentik...
GHSA-956X-8GVW-WG5V vulnerabilities
Vulnerabilities for packages: checkov...
GHSA-V396-V7Q4-X2QJ vulnerabilities
Vulnerabilities for packages: checkov...
CVE-2026-16221 vulnerabilities
Vulnerabilities for packages: argo-workflows, tileserver-gl, opensearch-dashboards, jupyter-base-notebook, prism, yaml-language-server, langfuse, vitess, renovate...
CVE-2026-52688
RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...
SUSE CVE-2026-59901
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the Bzip2Decoder handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a malformed bzip2 stream that permanently captures the...
SUSE CVE-2026-59919
Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.136.Final and 4.2.16.Final, Netty's HAProxy encoder HAProxyMessageEncoder writes AFUNIX source and destination socket addresses into the HAProxy V1 text protocol without validating them for CRLF...
