189240 matches found
CVE-2026-57176
Python Social Auth is a social authentication/registration mechanism...
CVE-2026-96546
A one-byte out-of-bounds heap read flaw was found in GIMP's uncompressed DDS image loader. When a user opens an uncompressed DDS image, the file-dds plug-in performs an unconditional one-byte look-ahead after processing the final pixel. This may cause the plug-in to crash if the byte immediately...
CVE-2026-77423
JLine is a Java library for handling console input. From 3.0.0 until 3.30.15 and 4.3.1, the JLine built-in less viewer passes user-controlled search and display-filter patterns from getPatternboolean doDisplayPattern in builtins/src/main/java/org/jline/builtins/Less.java directly to Java's...
Linux Distros Unpatched Vulnerability : CVE-2026-97509
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thunderbolt: Keep XDomain reference during the lifetime of a service This is needed because we release the service ID in tbservicerelease and the ID array is...
Linux Distros Unpatched Vulnerability : CVE-2026-96611
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg before 9.0 has a signed integer overflow in libavformat/mov.c. In movreadispe, uint32t width/height values from a crafted HEIF ispe box are stored into...
Linux Distros Unpatched Vulnerability : CVE-2026-93812
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: fix sdndr.data memory leak in ksmbdvfssetsdxattr ndrencodev4ntacl allocates sdndr.data via kzalloc at entry. If any subsequent ndrwrite call returns erro...
CVE-2026-93207
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Zero rpcgsswirecred at svcauthgssdecodecredbody entry svcauthgssdecodecredbody writes the caller's rpcgsswirecred field by field and assigns gcctx.len only on the success tail. The caller storage is svcdata-clcred, which...
CVE-2026-95521
A command injection flaw was found in rpm. Installing or rebuilding a...
CVE-2026-96748
PyMongos connection string parsing decodes percent-encoded characters...
CVE-2026-95519
A flaw was found in rpm. An attacker can supply a crafted manifest fil...
CVE-2026-88384
OpenEXR 3.4.14 contains a NULL Pointer Dereference in the C++ attribut...
CVE-2026-97404
In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Si...
Linux Distros Unpatched Vulnerability : CVE-2026-97454
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPICA: add boundary checks in acpipsgetnextfield Add boundary checks in acpipsgetnextfield to prevent out-of-bounds access. CVE-2026-97454 Note that Nessus...
CVE-2026-97509
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Keep XDomain reference during the lifetime of a service This is needed because we release the service ID in tbservicerelease and the ID array is owned by the parent XDomain...
CVE-2026-88357
nDPI 5.1.0 contains a memory access issue in the DNS dissector and ser...
CVE-2026-93817
In the Linux kernel, the following vulnerability has been resolved: perf: Fix addrfilterranges lifetime Lee Jia Jie reported that since event::addrfilterranges is used under RCU, it should be RCU freed...
Linux Distros Unpatched Vulnerability : CVE-2026-96674
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - alsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src/topology/ctl.c, allowing integer overflow that defeats bounds...
CVE-2026-67233
RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.1...