158827 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-45843
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - slip: bound decode reads against the compressed packet length slhcuncompress parses a VJ-compressed TCP header by advancing a pointer through the packet via...
CVE-2026-48710
Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP Host request header was not validated before being used to reconstruct request.url. Because the routing algorithm relies on the raw HTTP path while request.url is rebuilt from the Host header, a malformed header...
CVE-2026-42013
A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name SAN could cause the validation process to incorrectly fall back to checking the Common Name CN field. This could allow a remote attacker to bypass proper certificate validation, potentially leading to...
CVE-2026-42015
A flaw was found in gnutls. An off-by-one error exists in the PKCS12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS12 bag when appending to a bag that already contains 32 elements. This memory corruption could lead to a denial of...
CVE-2026-42012
A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier URI or Service SRV Subject Alternative Names SANs. This could cause the certificate validation process to incorrectly fall back to...
CVE-2026-5260
A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure...
CVE-2026-45740 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, pulumi, vitess, renovate, langfuse...
GHSA-JGGG-4JG4-V7C6 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, pulumi, vitess, renovate, langfuse...
GHSA-HFFM-XVC3-VPRC vulnerabilities
Vulnerabilities for packages: renovate...
CVE-2026-6951 vulnerabilities
Vulnerabilities for packages: renovate...
GHSA-Q8MJ-M7CP-5Q26 vulnerabilities
Vulnerabilities for packages: argo-workflows, tileserver-gl, kubeflow-pipelines, prism, sqlpad, json-server, saf, renovate, code-server, opensearch-dashboards, thingsboard, langfuse, kubeflow-centraldashboard...
GHSA-HFFM-XVC3-VPRC vulnerabilities
Vulnerabilities for packages: renovate...
CVE-2026-6951 vulnerabilities
Vulnerabilities for packages: renovate...
GHSA-Q8MJ-M7CP-5Q26 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, gitlab-rails-ce, kubeflow-centraldashboard, code-server, argo-workflows, kubescape-grype-offline-db, kibana, prism, langfuse, thingsboard-fips, saf, kubeflow-pipelines, renovate, wazuh-dashboard-fips, tileserver-gl, pelias-api, redisinsigh...
CVE-2026-8723 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, gitlab-rails-ce, kubeflow-centraldashboard, code-server, argo-workflows, kubescape-grype-offline-db, kibana, prism, langfuse, thingsboard-fips, saf, kubeflow-pipelines, renovate, wazuh-dashboard-fips, tileserver-gl, pelias-api, redisinsigh...
GHSA-Q62F-H9X2-GCQC vulnerabilities
Vulnerabilities for packages: camunda-zeebe, camunda...
CVE-2026-41712 vulnerabilities
Vulnerabilities for packages: camunda-zeebe, camunda...
USN-8310-1 linux-azure, linux-azure-6.17 vulnerabilities
It was discovered that the Linux kernel algifaead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-31431 Several security issues were discovered in th...
CVE-2026-9572
A security vulnerability has been detected in GPAC up to 2.4.0. Affected by this issue is the function MediaGetSample of the file src/isomedia/media.c of the component MP4Box. Such manipulation of the argument cat leads to memory leak. The attack can only be performed from a local environment. Th...
USN-8307-1: ONNX vulnerability
It was discovered that ONNX did not properly validate paths when extracting tar archives during model downloads. An attacker could possibly use this issue to overwrite arbitrary files on the system...