171152 matches found
CVE-2026-4672 vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce, gitlab-runner-fips, gitlab-runner, gitlab-rails-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce-fips, gitlab-cng, gitlab-cng-fips...
GHSA-8JC8-CVQJ-P926 vulnerabilities
Vulnerabilities for packages: gitlab-workhorse-ce, gitlab-runner-fips, gitlab-runner, gitlab-rails-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce-fips, gitlab-cng, gitlab-cng-fips...
CVE-2026-58041
A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSynccreateTagStore to continue executing a cached prepared statement after it has been reset and rebound with new parameters. SQLTagStore resets cached statements using sqlite3reset directly, bypassing the...
thunderbird security update
140.13.0-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 140.13.0 - Add OpenELA debranding 140.13.0-1 - Update to 140.13.0 ESR...
osbuild-composer security, bug fix, and enhancement update
175-1.0.1 - Track github upstream...
GHSA-QWWW-VCR4-C8H2 vulnerabilities
Vulnerabilities for packages: vitess...
GHSA-5V2H-R2CX-5XGJ vulnerabilities
Vulnerabilities for packages: arangodb...
GHSA-RRRM-QJM4-V8HF vulnerabilities
Vulnerabilities for packages: arangodb...
CVE-2022-21680 vulnerabilities
Vulnerabilities for packages: arangodb...
CVE-2022-21681 vulnerabilities
Vulnerabilities for packages: arangodb...
GHSA-QWWW-VCR4-C8H2 vulnerabilities
Vulnerabilities for packages: vitess...
thrift: Apache Thrift C++ bindings: Remote code execution via heap-based buffer overflow
A flaw was found in Apache Thrift C++ bindings. A remote, unauthenticated attacker can exploit a heap-based buffer overflow vulnerability without user interaction. This can lead to arbitrary code execution, allowing the attacker to gain full control over the affected system, compromise data, and...
thrift: Apache Thrift C++ bindings: Remote code execution via heap-based buffer overflow
A flaw was found in Apache Thrift C++ bindings. A remote, unauthenticated attacker can exploit a heap-based buffer overflow vulnerability without user interaction. This can lead to arbitrary code execution, allowing the attacker to gain full control over the affected system, compromise data, and...
CVE-2026-69152
The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand does not apply maxLength while constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memo...
CVE-2026-68945
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins repeated request parameters, allowing semantically distinct HttpClient requests to use the same...
CVE-2026-61372
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Jena Fuseki. This issue affects Apache Jena Fuseki: through 6.1.0. Users are recommended to upgrade to version 6.2.0, which fixes the issue...
io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records
A flaw was found in Netty's DnsResolveContext. An attacker controlling an authoritative name server for a subdomain can exploit this vulnerability by providing crafted NS records that are insufficiently validated. This allows the attacker to poison the DNS cache for parent domains, bypassing...
CVE-2026-18651
A flaw was found in 389 Directory Server. During SASL PLAIN authentication, the server installs connection-level bind credentials before performing the account-lock check. If the account is subsequently found to be locked, the bind is reported as failed to the client, but the already-installed...
p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing
A flaw was found in p11-kit. The RPC message attribute parsing functions p11rpcmessagegetattribute and p11rpcmessagegetattributearrayvalue form a mutually-recursive call chain with no recursion depth limit when processing nested CKAWRAPTEMPLATE, CKAUNWRAPTEMPLATE, and CKADERIVETEMPLATE attributes...