177001 matches found
CVE-2026-42492
Xenstore, to have an up-to-date picture of the entire system, wants to know of domains appearing and disappearing. To make this more robust, a new XENDOMCTLgetdomainstate was introduced. The management of the bitmap underlying that operation is tied into the binding of the VIRQDOMEXC virtual IRQ...
CVE-2026-42493
Addressing certain issues, in particular related to operations which may take excessively long and therefore would need preemption, has turned out overly costly. Since alternatives HVM/PVH: HAP, PV: shim are commonly available, the decision was to deprecate the functionality, while still retainin...
CVE-2026-6949
TSIG packet with name compression can crash DNS...
gstreamer1-plugins-good: GStreamer: Heap buffer overflow in WavPack decoder via integer overflow
A flaw was found in GStreamer's WavPack audio decoder in gst-plugins-good. When processing a specially crafted WavPack file, an integer overflow in the buffer size calculation 4 blocksamples channels in gstwavpackdechandleframe causes a very small heap allocation. The WavPack library then writes...
CVE-2026-58224
A flaw was found in Samba's CTDB, the clustered database service used by Samba. Insufficient integrity validation of received CTDB protocol packets allows malformed packets containing invalid field lengths, improperly terminated strings, or inconsistent packet sizes to be processed without adequa...
CVE-2026-6949
TSIG packet with name compression can crash DNS. Incorrect size calculations when a TSIG record contains compressed names can lead to a large out-of-bounds write causing the server to crash...
httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash
A flaw was found in the modauthnsocache module of httpd. This vulnerability allows an unauthenticated remote user to crash a child process due to a NULL pointer dereference when the server is operating in a caching forward proxy configuration...
httpd: NULL pointer dereference via specially crafted request
A flaw was found in the moddavlock module of httpd. This vulnerability allows a remote unauthenticated attacker to crash the server due to a NULL pointer dereference via a specially crafted request...
httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check
A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the server fails to properly check if a string is null-terminated before attempting to read it, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue...
CVE-2026-46718 vulnerabilities
Vulnerabilities for packages: opensearch-fips, opensearch...
GHSA-C2RV-HWQM-WJPG vulnerabilities
Vulnerabilities for packages: opensearch-fips, opensearch...
GHSA-3FXJ-6JH8-HVHX vulnerabilities
Vulnerabilities for packages: cosmo-router-fips, telegraf, fluxcd-kustomize-mutating-webhook-fips, karma, karma-fips, fluxcd-kustomize-mutating-webhook, cosmo-router, zitadel...
GHSA-9G5Q-2W5X-HMXF vulnerabilities
Vulnerabilities for packages: cosmo-router-fips, telegraf, fluxcd-kustomize-mutating-webhook-fips, karma, karma-fips, fluxcd-kustomize-mutating-webhook, cosmo-router, zitadel...
GHSA-RJR7-JGGH-PGCP vulnerabilities
Vulnerabilities for packages: cosmo-router-fips, telegraf, fluxcd-kustomize-mutating-webhook-fips, karma, karma-fips, fluxcd-kustomize-mutating-webhook, cosmo-router, zitadel...
GHSA-PGH9-MPWC-8JJF vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
CVE-2025-71261 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester...
GHSA-6G55-P6WH-862Q vulnerabilities
Vulnerabilities for packages: langfuse, authentik, semaphore, keep-fips, nextcloud-server, langfuse-fips, arangodb, vitess, authentik-fips, keep, pelias-api, cadence-web...
GHSA-PM4M-PH32-GHV5 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, authentik-fips, renovate...
GHSA-R28C-9Q8G-F849 vulnerabilities
Vulnerabilities for packages: langfuse, jitsucom-jitsu, authentik, semaphore, homepage, keep-fips, librechat, langfuse-fips, nextcloud-server, arangodb, unleash, unleash-fips, vitess, authentik-fips, keep, pelias-api, cadence-web...