CVE-2026-54241

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate the sample adaptive offset input-buffer size, allowing a crafted HEVC stream with large dimensions and 16-bit luma samples to cause an integer overflow, an...

CVE-2026-57964

Unknown description...

CVE-2026-13606

Unknown description...

CVE-2026-6425

libvhost-user: fix buffer overflow in virtqueuereadindirectdesc...

CVE-2026-48002

ui/vnc OOB writes...

CVE-2026-48003

ui/vnc: fix OOB read updating VNC update frequency stats...

UBUNTU-CVE-2026-48928

A inconsistency in Node.js hostname matching can cause a trust-policy bypass in multi-context mTLS setups. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...

UBUNTU-CVE-2026-49839

jq is a command-line JSON processor. Prior to 1.8.2, jq --rawfile can turn a handled oversized-string error into invalid-state reuse and a real heap out-of-bounds write in assertion-disabled builds. When jvloadfileraw=1 reads an attacker-controlled file, it repeatedly appends file chunks to the...

PT-2026-55840

Name of the Vulnerable Software and Affected Versions Protego versions prior to 0.6.2-1.1 Description Security issues were identified in the Protego package within the openSUSE Tumbleweed distribution. Recommendations Update to version 0.6.2-1.1...

PT-2026-55839

Name of the Vulnerable Software and Affected Versions kas versions prior to 5.4 Description Internal SSH key setup triggered by SSH PRIVATE KEY or SSH PRIVATE KEY FILE creates a /.ssh/config file when no user-specific SSH configuration exists. The ssh no host key check function in kas/libcmds.py...

UBUNTU-CVE-2026-50195

containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a vulnerability in the CRI checkpoint import process where it fails to validate the image references specified within a checkpoint image's configuration. An attacker with permissions to create pods ca...

PT-2026-54954

Name of the Vulnerable Software and Affected Versions OpenSlide versions prior to 4.0.1 OpenSlide official binary builds 4.0.0.10 and 4.0.0.11 Description A behavior change in libtiff 4.7.1 affects the indirect TIFF tile path in src/openslide-decode-tiff.c and the openslide tiff read tile functio...

PT-2026-53175

Shaarli is a personal bookmarking service. Versions prior to 0.16.3 are vulnerable to stored XSS in application/front/controller/visitor/BookmarkListController.php. The permalink handler concatenates the raw $bookmark-getTitle into the pagetitle template variable and the RainTPL template emits it...

CVE-2026-47178

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.19.0 through 1.21.2, a crafted HEIF file uncompressed unci codec, tiled, component-interleaved, 4:2:0 triggers a heap out-of-bounds write in libheif's uncompressed tile decoder. The write overwrites the C++ vtable pointer o...

CVE-2026-39044

Integer overflow in WAV parser cue handling...

PT-2026-53000

Name of the Vulnerable Software and Affected Versions gstreamer1-plugins-good affected versions not specified gstreamer1-plugins-good-extras affected versions not specified gstreamer1-plugins-good-gtk affected versions not specified gstreamer1-plugins-good-qt affected versions not specified...

PT-2026-53026

Name of the Vulnerable Software and Affected Versions gst-libav affected versions not specified Description The gst-libav module, a GStreamer plugin used for encoders, decoders, muxers, and demuxers provided by FFmpeg, contains a security issue. Recommendations At the moment, there is no...

PT-2026-52999

Name of the Vulnerable Software and Affected Versions gstreamer1-plugins-good affected versions not specified gstreamer1-plugins-good-extras affected versions not specified gstreamer1-plugins-good-gtk affected versions not specified gstreamer1-plugins-good-qt affected versions not specified...

UBUNTU-CVE-2025-55663

A segmentation violation in the TrackSetStreamDescriptor function isomedia/track.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

UBUNTU-CVE-2025-55641

A NULL pointer dereference in the gfisomcopysampleinfo function isomedia/isomwrite.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...