44302 matches found
CVE-2026-14624
CVE-2026-14624 affects omec-project amf up to version 2.0.2/2.1.1. The issue is in an unknown function within file /go/src/amf/ngap/handler.go of the NGSetupRequest Handler, where manipulation leads to denial of service . It can be triggered remotely, and a public exploit is noted. A patch is ava...
OPENSUSE-SU-2026:11182-1 clamav-1.5.3-1.1 on GA media
These are all security issues fixed in the clamav-1.5.3-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-14631
webpack-dev-server versions 5.2.5 and earlier terminate the whole Node.js process when an unauthenticated peer sends either a normal HTTP request with a malformed Host header or a WebSocket upgrade to the default /ws endpoint with a malformed Origin header. The malformed value causes an uncaught...
Linux kernel deflate_compress() Heap Buffer Overflow DoS
The vulnerability of the deflatecompress function in the crypto/deflate.c module of the Linux kernel’s cryptographic subsystem is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
python311-mistune-3.3.2-1.1 on GA media (moderate)
python311-mistune-3.3.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:11180-1 Rating: moderate Cross-References: CVE-2026-49851 CVSS scores: CVE-2026-49851 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability ca...
kitty-0.47.4-2.1 on GA media (moderate)
kitty-0.47.4-2.1 on GA media Announcement ID: openSUSE-SU-2026:11176-1 Rating: moderate Cross-References: CVE-2026-46604 CVSS scores: CVE-2026-46604 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...
PT-2026-55576
Name of the Vulnerable Software and Affected Versions webpack-dev-server versions prior to 5.2.6 Description An unauthenticated peer can cause the Node.js process to terminate, resulting in a denial of service. This occurs when the server receives a normal HTTP request with a malformed Host heade...
react-server-dom-webpack: react-server-dom-parcel: reactreact-server-dom-turbopack: React Server Components: Denial of Service via specially crafted HTTP requests
A flaw was found in React Server Components. A remote attacker can exploit this vulnerability by sending specially crafted HTTP requests to Server Function endpoints. This can lead to a Denial of Service DoS, causing server crashes, out-of-memory exceptions, or excessive CPU usage, thereby...
PT-2026-55553
These are all security issues fixed in the etcd-3.6.13-1.1 package on the GA media of openSUSE Tumbleweed...
ROS-20260702-73-0012
The vulnerability of the skbSegment function in the net/core/skbuff.c module, which supports network functions of the Linux kernel, is related to the use of the NULL pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of t...
PT-2026-55554
These are all security issues fixed in the gzip-1.14-2.1 package on the GA media of openSUSE Tumbleweed...
Znuny Generic Interface Data Compromise
The vulnerability of the Generic Interface component in the software application for rapid display and access to customer information in Znuny is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and...
Google Chrome WebGPU Data Compromise
The vulnerability of Google Chrome’s WebGPU component relates to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information through a specially created HTML page...
Network component Google Chrome Data Compromise
The vulnerability of the Google Chrome browser’s Network component is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
NVIDIA Graphics Driver Use-After-Free
The vulnerabilities of NVIDIA’s graphics driver families—NVS, Quadro, NVIDIA RTX, GeForce—are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...
PT-2026-55560
These are all security issues fixed in the python311-mistune-3.3.2-1.1 package on the GA media of openSUSE Tumbleweed...
SUSE SLES16 Security Update : python-python-multipart (SUSE-SU-2026:22372-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22372-1 advisory. This update for python-python-multipart fixes the following issues - CVE-2026-53537: multipart/form-data with extended parameters...
OPENSUSE-SU-2026:11176-1 kitty-0.47.4-2.1 on GA media
These are all security issues fixed in the kitty-0.47.4-2.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-97629
Уязвимость системы централизованного управления ИТ-инфраструктурой «РЕД АДМ» связана с недостатками процедуры аутентификации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации...