177773 matches found
CVE-2026-56745 vulnerabilities
Vulnerabilities for packages: apache-nifi, neo4j, akhq, management-api-for-apache-cassandra-5.0, spark, zipkin, wavefront-proxy, flyway, druid, celeborn, apache-activemq-artemis, opensearch, keycloak, cloudwatch-exporter, apicurio-registry, infinispan, strimzi-kafka-operator, kserve-modelmesh, te...
GHSA-558V-64GR-WGG4 vulnerabilities
Vulnerabilities for packages: apache-nifi, neo4j, akhq, cassandra, management-api-for-apache-cassandra-5.0, zookeeper, spark, zipkin, wavefront-proxy, flyway, druid, celeborn, cassandra-reaper, apache-activemq-artemis, opensearch, keycloak, cloudwatch-exporter, apicurio-registry, infinispan,...
CVE-2026-63317
Arbitrary Class Instantiation via XML Feature Generator Descriptor and Format Name in Apache OpenNLP Versions Affected: - before 2.5.10 - before 3.0.0-M5 Description: Three code paths in Apache OpenNLP load a class by its fully-qualified name via Class.forName and invoke its no-arg constructor...
CVE-2026-66141
Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...
CVE-2026-66141
Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...
CVE-2026-66141
Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...
CVE-2026-66140
Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-name are mishandled...
CVE-2026-66140
Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-name are mishandled...
.NET: .NET Denial of Service Vulnerability
Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...
.NET: .NET Information Disclosure Vulnerability
Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...
.NET: .NET Elevation of Privilege Vulnerability
Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...
SUSE CVE-2026-10050
In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes. This was done because the initial specification for HTTP did not specify explicitly a charset, and it was assumed to be ISO-8859-1 for historical reasons. If the password contains...
SUSE CVE-2026-15792
A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic...
SUSE CVE-2026-52688
RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...
SUSE CVE-2026-54552
sh provides Python process launching. Prior to 2.2.4, the uid option in sh.py performs an incomplete privilege drop on Linux and Unix-like systems. When sh runs from an elevated process and launches a command with uid set to an unprivileged user, the child changes its UID but can retain the paren...
GHSA-35RM-7J9C-2F7M vulnerabilities
Vulnerabilities for packages: zed...
CVE-2026-53600 vulnerabilities
Vulnerabilities for packages: zed...
CVE-2026-61666 vulnerabilities
Vulnerabilities for packages: pghero, ruby4.0-rails, gitlab-rails-ce, pghero-fips...