CVE-2025-6589

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/specials/pagers/BlockListPager.Php. This issue affects MediaWiki: = 1.42.0...

CVE-2025-6594

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files resources/src/mediawiki.Special.Apisandbox/ApiSandbox.Js. This issue affects MediaWiki: from 1.27.0 before...

CVE-2025-6597

Vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/auth/AuthManager.Php. This issue affects MediaWiki: from before 1.39.13, 1.42.7, 1.43.2, 1.44.0...

GHSA-G72F-6G67-W739 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-qemu, linux-aws, linux-azure, linux-gcp...

CVE-2020-36968

Removed by vendor...

GHSA-XHP4-6G9V-4XVJ vulnerabilities

Vulnerabilities for packages: redis...

ROS-20260128-73-0044

Vulnerability in kernel-lt related to writing outside buffer boundaries in memory. Exploitation of the vulnerability may allow an attacker to execute arbitrary code...

CVE-2025-15469

Issue summary: The 'openssl dgst' command-line tool silently truncates input data to 16MB when using one-shot signing algorithms and reports success instead of an error. Impact summary: A user signing or verifying files larger than 16MB with one-shot algorithms such as Ed25519, Ed448, or ML-DSA m...

GHSA-6W46-J5RX-G56G pytest has vulnerable tmpdir handling

pytest through 9.0.2 on UNIX relies on directories with the /tmp/pytest-of-user name pattern, which allows local users to cause a denial of service or possibly gain privileges...

CVE-2026-0865

User-controlled header names and values containing newlines can allow injecting HTTP headers...

GHSA-JM66-CG57-JJV5 vulnerabilities

Vulnerabilities for packages: open-webui, duplicity, barman, kserve, request-1276, authentik-fips, airflow, az, py3-cassandra-medusa, awx, datadog-agent, pgadmin4, datadog-agent-fips, authentik...

CVE-2025-71071

In the Linux kernel, the following vulnerability has been resolved: iommu/mediatek: fix use-after-free on probe deferral The driver is dropping the references taken to the larb devices during probe after successful lookup as well as on errors. This can potentially lead to a use-after-free in case...

ROS-20260113-7326

Vulnerability in kernel-lt related to insufficient control of the resource during its existence. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

CVE-2018-10840 vulnerabilities

Vulnerabilities for packages: linux-qemu-melange, linux-vmware, linux-qemu...

CVE-2024-52338 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

GHSA-QV3P-FMV3-9HWW vulnerabilities

Vulnerabilities for packages: splunk-otel-collector-fips, splunk-otel-collector...

CVE-2025-12390 vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips...

GHSA-P549-C3CG-F4QM vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

CVE-2025-15280

FontForge SFD File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of FontForge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or...

CVE-2025-68920

C-Kermit aka ckermit through 10.0 Beta.12 aka 416-beta12 before 244644d allows a remote Kermit system to overwrite files on the local system, or retrieve arbitrary files from the local system...