175975 matches found
CVE-2026-67589
Removed by vendor...
CVE-2026-67588
Removed by vendor...
CVE-2026-71192
In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers X-Copy-From, X-Copy-From-Account from S3 API requests when s3acl=true. An attacker can inject these headers into a signed PUT request targeting their own bucket, causing Swift to perform a...
CVE-2026-71191
In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz- headers are covered by the SigV4 signature on presigned URL requests. An attacker who obtains a presigned PUT URL can inject an unsigned X-Amz-Copy-Source header, causing Swift to perform a server-side copy...
CVE-2026-71190
In OpenStack Swift through 2.38.0, the proxy server Accept header parser contains a regular expression vulnerable to catastrophic backtracking ReDoS. The "qdtext" pattern ?:^"|\. allows an unauthenticated remote attacker to send a crafted Accept header that causes exponential CPU consumption in...
httpd: httpd: HTTP/2 Remote Denial of Service via compression bomb and Slowloris-style attack
A flaw was found in HTTP/2, affecting various web servers. A remote attacker can exploit this vulnerability by combining an HPACK compression bomb with a zero-byte flow-control window. This technique allows a small amount of data to expand into large memory allocations on the server, which are th...
GHSA-MX64-MJ3Q-7PRJ vulnerabilities
Vulnerabilities for packages: dapr-fips, dapr...
GHSA-W8J3-PQ8G-8M7W vulnerabilities
Vulnerabilities for packages: dapr-fips, dapr...
GHSA-MC57-H6J3-3HMV vulnerabilities
Vulnerabilities for packages: dapr-fips, dapr...
CVE-2026-46385 vulnerabilities
Vulnerabilities for packages: dapr-fips, dapr...
CVE-2026-46384 vulnerabilities
Vulnerabilities for packages: dapr-fips, dapr...
GHSA-MC57-H6J3-3HMV vulnerabilities
Vulnerabilities for packages: dapr...
GHSA-MX64-MJ3Q-7PRJ vulnerabilities
Vulnerabilities for packages: dapr...
CVE-2026-46384 vulnerabilities
Vulnerabilities for packages: dapr...
GHSA-W8J3-PQ8G-8M7W vulnerabilities
Vulnerabilities for packages: dapr...
CVE-2026-46385 vulnerabilities
Vulnerabilities for packages: dapr...
[SECURITY] Fedora 43 Update: doctl-1.164.0-1.fc43
The official command line interface for the DigitalOcean API...
httpd: Apache HTTP Server: Out-of-bounds Read in mod_headers and mod_mime
A flaw was found in Apache HTTP Server. An out-of-bounds read vulnerability exists when modheaders and modmime are used with multiple response languages. This could allow a remote attacker to disclose sensitive information from memory or cause a denial of service...
[SECURITY] Fedora 44 Update: perl-PAR-Packer-1.064-6.fc44
This module implements the App::Packer::Backend interface, for generating stand-alone executables, perl scripts and PAR files...
SUSE CVE-2026-54787
sigstore-go is a Go library for Sigstore signing and verification. Prior to 1.2.1, sigstore-go does not check a bundle signing timestamp against the validity window of an ExpiringKey wrapping a self-managed long-lived signing key without a certificate, which can allow an attacker holding expired...