173446 matches found
CVE-2026-67591
Removed by vendor...
CVE-2026-67590
Removed by vendor...
CVE-2026-67589
Removed by vendor...
CVE-2026-67588
Removed by vendor...
CVE-2026-71192
In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers X-Copy-From, X-Copy-From-Account from S3 API requests when s3acl=true. An attacker can inject these headers into a signed PUT request targeting their own bucket, causing Swift to perform a...
CVE-2026-71191
In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz- headers are covered by the SigV4 signature on presigned URL requests. An attacker who obtains a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, causing Swift to perform a server-side copy...
CVE-2026-71190
In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastrophic backtracking ReDoS. The "qdtext" pattern ?:^"|\. allows an unauthenticated remote attacker to send a crafted Accept header that causes exponential CPU consumption in...
GHSA-MX64-MJ3Q-7PRJ vulnerabilities
Vulnerabilities for packages: dapr, dapr-fips...
GHSA-W8J3-PQ8G-8M7W vulnerabilities
Vulnerabilities for packages: dapr, dapr-fips...
GHSA-MC57-H6J3-3HMV vulnerabilities
Vulnerabilities for packages: dapr, dapr-fips...
CVE-2026-46385 vulnerabilities
Vulnerabilities for packages: dapr, dapr-fips...
CVE-2026-46384 vulnerabilities
Vulnerabilities for packages: dapr, dapr-fips...
GHSA-MX64-MJ3Q-7PRJ vulnerabilities
Vulnerabilities for packages: dapr...
GHSA-MC57-H6J3-3HMV vulnerabilities
Vulnerabilities for packages: dapr...
CVE-2026-46384 vulnerabilities
Vulnerabilities for packages: dapr...
GHSA-W8J3-PQ8G-8M7W vulnerabilities
Vulnerabilities for packages: dapr...
CVE-2026-46385 vulnerabilities
Vulnerabilities for packages: dapr...
[SECURITY] Fedora 43 Update: doctl-1.164.0-1.fc43
The official command line interface for the DigitalOcean API...
httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime
A flaw was found in Apache HTTP Server. An out-of-bounds read vulnerability exists when modheaders and modmime are used with multiple response languages. This could allow a remote attacker to disclose sensitive information from memory or cause a denial of service...