192323 matches found
GHSA-PH9C-7HW9-VHHW vulnerabilities
Vulnerabilities for packages: pinot, hadoop-client-modules, ghidra, apache-nifi, zookeeper-fips, opensearch, apache-pulsar, apache-pulsar-fips, pinot-fips, zookeeper, hadoop-fips, spark, akhq, opensearch-fips, apache-camel-karavan-devmode, wazuh-indexer, spark-fips, kafka-fips, scala, kafka, drui...
CVE-2026-77421 vulnerabilities
Vulnerabilities for packages: pinot, hadoop-client-modules, ghidra, apache-nifi, zookeeper-fips, opensearch, apache-pulsar, apache-pulsar-fips, pinot-fips, zookeeper, hadoop-fips, spark, akhq, opensearch-fips, apache-camel-karavan-devmode, wazuh-indexer, spark-fips, kafka-fips, scala, kafka, drui...
CVE-2026-77422 vulnerabilities
Vulnerabilities for packages: pinot, hadoop-client-modules, ghidra, apache-nifi, zookeeper-fips, opensearch, apache-pulsar, apache-pulsar-fips, pinot-fips, zookeeper, hadoop-fips, spark, akhq, opensearch-fips, apache-camel-karavan-devmode, wazuh-indexer, spark-fips, kafka-fips, scala, kafka, drui...
GHSA-5Q95-HRPC-M3W3 vulnerabilities
Vulnerabilities for packages: pinot, hadoop-client-modules, elasticsearch, ghidra, apache-nifi, zookeeper-fips, opensearch, apache-pulsar, apache-pulsar-fips, elasticsearch-fips, pinot-fips, zookeeper, hadoop-fips, spark, akhq, opensearch-fips, apache-camel-karavan-devmode, wazuh-indexer,...
CVE-2026-77420 vulnerabilities
Vulnerabilities for packages: pinot, hadoop-client-modules, elasticsearch, ghidra, apache-nifi, zookeeper-fips, opensearch, apache-pulsar, apache-pulsar-fips, elasticsearch-fips, pinot-fips, zookeeper, hadoop-fips, spark, akhq, opensearch-fips, apache-camel-karavan-devmode, wazuh-indexer,...
CVE-2026-77420 vulnerabilities
Vulnerabilities for packages: druid, spark, akhq, kafka, opensearch, zookeeper, apache-pulsar...
GHSA-R2XF-8XR9-62GW vulnerabilities
Vulnerabilities for packages: druid, spark, akhq, kafka, opensearch, zookeeper, apache-pulsar...
GHSA-5Q95-HRPC-M3W3 vulnerabilities
Vulnerabilities for packages: druid, spark, akhq, kafka, opensearch, zookeeper, apache-pulsar...
CVE-2026-77422 vulnerabilities
Vulnerabilities for packages: druid, spark, akhq, kafka, opensearch, zookeeper, apache-pulsar...
CVE-2026-97404
In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Signature header. By sending a request with an empty URL-Signature header, an unauthenticated remote attacker who knows a target project's UUID may bypass both Keystone authentication and pre-signed URL verification, resulting in...
kernel: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
A race condition was found in the Linux kernel cryptographic user API, AFALG in the way concurrent writes to the same AFALG socket are handled. Interleaved data and inconsistent internal socket state may result. A local user could use this flaw to crash the system or corrupt cryptographic operati...
CVE-2026-97059
DCMTK through 3.7.0 contains a heap over-read vulnerability in ConcatenationLoader that copies pixel data frames without validating the PixelData buffer length against the declared NumberOfFrames. Attackers can craft malicious DICOM instances declaring more frames than the buffer contains to...
libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements
A flaw was found in libxml2. A local attacker could exploit a stack-based buffer overflow in the xmlSnprintfElements function to achieve arbitrary code execution. This vulnerability in a fundamental system library could lead to significant system compromise if successfully exploited...
libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow
A flaw was found in libxml2, a software library for parsing XML documents. An integer overflow within the xmlDictAddQString function can lead to a heap-based buffer overflow. This vulnerability could allow a local attacker to execute arbitrary code on the system, potentially compromising its...
libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks
An integer overflow in the libxml2 xmlIO module occurs when data backlogs exceed maximum integer limits. This flaw passes negative length values to downstream write callbacks, creating an unsafe state that can lead to data corruption or compromise application confidentiality and integrity...
CVE-2026-95521
A command injection flaw was found in rpm. Installing or rebuilding a source RPM whose source or spec file basenames contain a % macro construct causes rpm to execute an attacker-controlled shell command via popen while relocating the source file list. This allows arbitrary command execution as t...
CVE-2026-95519
A flaw was found in rpm. An attacker can supply a crafted manifest file that, when processed by a user or automation using rpm -q -p or similar manifest-processing flows, leads to arbitrary code execution. This occurs because manifest entries are unexpectedly macro-expanded before being opened,...
github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object
A flaw was found in Go JOSE, a library for handling JSON Web Encryption JWE objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the...
github.com/cri-o/cri-o: Fix Bypass for CVE-2022-4318 — /etc/passwd Injection via HOME env
A flaw was found in CRI-O. The fix for a previous vulnerability CVE-2022-4318 was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitra...
USN-8814-1: Octavia vulnerabilities
It was discovered that Octavia did not properly validate TLS cipher string fields in the Amphora provider driver. An authenticated attacker who owns a TLS-enabled load balancer could possibly use this issue to inject arbitrary HAProxy configuration directives. CVE-2026-94572 It was discovered tha...