177207 matches found
nginx: NGINX: Memory disclosure and denial of service in ngx_http_slice_module
A vulnerability in the NGINX ngxhttpslicemodule allows remote, unauthenticated attackers to access uninitialized memory via crafted requests. If configured with unnamed regex captures or background cache updates, this flaw can result in limited memory disclosure or a denial-of-service crash...
gitpython: GitPython: Command Injection via Git option prefix abbreviation
A flaw was found in GitPython. This vulnerability stems from an incomplete command injection blocklist that fails to account for Git's long-option prefix abbreviation feature. An attacker can bypass existing security measures by using abbreviated option names, which Git then resolves to dangerous...
[SECURITY] Fedora 43 Update: google-osconfig-agent-20260717.00-1.fc43
Google OS Config Agent...
gitpython: GitPython: Command Injection via Git option prefix abbreviation
A flaw was found in GitPython. This vulnerability stems from an incomplete command injection blocklist that fails to account for Git's long-option prefix abbreviation feature. An attacker can bypass existing security measures by using abbreviated option names, which Git then resolves to dangerous...
gitpython: GitPython: Remote Code Execution via Newline Injection in config_writer()
A flaw was found in GitPython. This vulnerability allows attackers to inject newline characters into the section parameter of the configwriter function, leading to the injection of arbitrary section headers into the .git/config file. By forging a core section with a malicious hooksPath, an attack...
sqlite: sqlite: Arbitrary code execution via use-after-free in JSON parsing
A flaw was found in sqlite. This use-after-free vulnerability in the JSON parsing logic allows remote attackers to craft malicious JSON payloads. This can trigger memory deallocation followed by illegal memory access, potentially leading to arbitrary code execution, sensitive information leakage,...
sqlite: sqlite: Arbitrary code execution via malicious SQL statement
A flaw was found in sqlite. A remote attacker can exploit a use-after-free vulnerability in the ORDER BY clause parsing routine by crafting a malicious SQL statement. This can lead to an application crash, sensitive information disclosure, and in some cases, arbitrary code execution, allowing the...
GHSA-MH99-V99M-4GVG vulnerabilities
Vulnerabilities for packages: redisinsight, pelias-api, vitess, argo-workflows, nextcloud-server, wazuh-dashboard-fips, langfuse-fips, wazuh-dashboard, prism, kibana, opensearch-dashboards-fips, graalvm, npm, opensearch-dashboards, pulumi, thingsboard, unleash-fips, sqlpad, renovate, arangodb,...
CVE-2026-14257 vulnerabilities
Vulnerabilities for packages: redisinsight, pelias-api, vitess, argo-workflows, nextcloud-server, wazuh-dashboard-fips, langfuse-fips, wazuh-dashboard, prism, kibana, opensearch-dashboards-fips, graalvm, npm, opensearch-dashboards, pulumi, thingsboard, unleash-fips, sqlpad, renovate, arangodb,...
GHSA-V74W-7MR3-4QG3 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, hadoop-fips, tez, apache-hop-fips, seata, apache-hop, thingsboard...
GHSA-FJR4-X663-MWXC vulnerabilities
Vulnerabilities for packages: datahub-ingestion, mlflow-fips, opal, mlflow, datahub-ingestion-fips, jupyter-all-spark-notebook, awx...
GHSA-6P8H-3WGX-97GF vulnerabilities
Vulnerabilities for packages: datahub-ingestion, mlflow-fips, opal, mlflow, datahub-ingestion-fips, jupyter-all-spark-notebook, awx...
GHSA-3RP5-JJMW-4WV2 vulnerabilities
Vulnerabilities for packages: datahub-ingestion, mlflow-fips, opal, mlflow, datahub-ingestion-fips, jupyter-all-spark-notebook, awx...
GHSA-R9MR-M37C-5FR3 vulnerabilities
Vulnerabilities for packages: datahub-ingestion, mlflow-fips, opal, mlflow, datahub-ingestion-fips, jupyter-all-spark-notebook, awx...
GHSA-94P4-4CQ8-9G67 vulnerabilities
Vulnerabilities for packages: datahub-ingestion, mlflow-fips, opal, mlflow, datahub-ingestion-fips, jupyter-all-spark-notebook, awx...
GHSA-G35J-M5XG-VH3Q vulnerabilities
Vulnerabilities for packages: ipfs-cluster, rke2-runtime-fips, ipfs-cluster-fips, spegel-fips, spegel, k3s, rke2-runtime, kubo...
CVE-2026-57497 vulnerabilities
Vulnerabilities for packages: ipfs-cluster, rke2-runtime-fips, ipfs-cluster-fips, spegel-fips, spegel, k3s, rke2-runtime, kubo...
GHSA-R292-9MHP-454M vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, haraka, kubeflow-centraldashboard, wazuh-dashboard, prism, wazuh-dashboard-fips, kibana, opensearch-dashboards-fips, graalvm, npm, pulumi, opensearch-dashboards, sqlpad, renovate, saf, code-server, actions-runner, gemini-cli, node-gyp, lerna...
GHSA-JPCW-4WR7-C3VQ vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-workspaces, crossplane-provider-aws-dsql, crossplane-provider-aws-datasync-fips, crossplane-provider-aws-glacier, crossplane-provider-aws-lakeformation-fips, crossplane-provider-azure-servicefabric, crossplane-provider-azure-orbital,...
GHSA-R277-6W6Q-XMQW vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-workspaces, crossplane-provider-aws-dsql, crossplane-provider-aws-datasync-fips, crossplane-provider-aws-glacier, crossplane-provider-aws-lakeformation-fips, crossplane-provider-azure-servicefabric, crossplane-provider-azure-orbital,...