33900 matches found
CVE-2026-45190 Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass
Net::CIDR::Lite versions before 0.24 for Perl does not properly validate IP address and CIDR mask inputs, which may allow IP ACL bypass. Inputs containing a trailing newline or non-ASCII digit characters pass the validators but are then re-encoded by the parser to a different address than the inp...
UBUNTU-CVE-2026-7568
In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, and 8.5. before 8.5.6, the metaphone function in ext/standard/metaphone.c uses a signed int variable to track the current position within the input string. If a string longer than 2,147,483,647 bytes is passed, a signed...
CVE-2026-6722 Use-After-Free in SOAP using Apache map
In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, and 8.5. before 8.5.6, the SOAP extension's object deduplication mechanism stores pointers to PHP objects in a global map without incrementing their reference counts. When an apache:Map node contains duplicate keys,...
CVE-2026-6735 XSS within PHP-FPM status endpoint
In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, 8.5. before 8.5.6, due to improper sanitation of user data, it allows an attacker to compose an URL, which will cause the target to execute arbitrary JavaScript code XSS on the target's machine when the target is viewing...
UBUNTU-CVE-2026-45184
Kdenlive before 26.04.1 allows dangerous proxy parameters when an attacker-controlled project file is used...
CVE-2026-45184
Kdenlive has a vulnerability in versions prior to 26.04.1 where dangerous proxy parameters can be introduced via an attacker-controlled project file. The issue affects handling of proxies within the project file, with potential impacts to confidentiality and integrity (per CVSS: LOCAL, HIGH impac...
go.opentelemetry.io/otel: go.opentelemetry.io/otel/schema/v1.0: go.opentelemetry.io/otel/schema/v1.1: OpenTelemetry-Go: Denial of Service due to file descriptor leak
A flaw was found in OpenTelemetry-Go before schema package version 0.0.17. ParseFile in go.opentelemetry.io/otel/schema/v1.0 and v1.1 opens a schema file and passes it to Parse without closing it, leaking one file descriptor per successful call. Repeated parsing in a long-running process can...
CVE-2026-41311 LiquidJS is vulnerable to Denial of Service via circular block reference in layout
LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to version 10.25.7, a circular block reference in % layout % / % block % causes an infinite recursive loop, consuming all available memory 4GB and crashing the Node.js process with FATAL ERROR: JavaScript he...
CVE-2026-23399 affecting package kernel for versions less than 6.6.137.1-2
CVE-2026-23399 affecting package kernel for versions less than 6.6.137.1-2. A patched version of the package is available...
CVE-2026-39882 affecting package moby-containerd-cc for versions less than 1.7.7-11
CVE-2026-39882 affecting package moby-containerd-cc for versions less than 1.7.7-11. A patched version of the package is available...
CVE-2026-39882 affecting package docker-compose for versions less than 2.27.0-9
CVE-2026-39882 affecting package docker-compose for versions less than 2.27.0-9. A patched version of the package is available...
CVE-2026-40510 affecting package opensc for versions less than 0.27.0-rc1
CVE-2026-40510 affecting package opensc for versions less than 0.27.0-rc1. A patched version of the package is available...
CVE-2026-43165 affecting package kernel for versions less than 6.6.137.1-2
CVE-2026-43165 affecting package kernel for versions less than 6.6.137.1-2. An upgraded version of the package is available that resolves this issue...
CVE-2025-66037 affecting package opensc for versions less than 0.27.1-1
CVE-2025-66037 affecting package opensc for versions less than 0.27.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-5160 affecting package telegraf for versions less than 1.31.0-19
CVE-2026-5160 affecting package telegraf for versions less than 1.31.0-19. A patched version of the package is available...
CVE-2026-28390 affecting package edk2 for versions less than 20240524git3e722403cd16-16
CVE-2026-28390 affecting package edk2 for versions less than 20240524git3e722403cd16-16. A patched version of the package is available...
CVE-2026-27820 affecting package ruby for versions less than 3.3.5-8
CVE-2026-27820 affecting package ruby for versions less than 3.3.5-8. A patched version of the package is available...
CVE-2026-33056 affecting package rpm-ostree for versions less than 2024.4-10
CVE-2026-33056 affecting package rpm-ostree for versions less than 2024.4-10. A patched version of the package is available...
CVE-2026-35201 affecting package rubygem-rdiscount for versions less than 2.2.7.4-1
CVE-2026-35201 affecting package rubygem-rdiscount for versions less than 2.2.7.4-1. An upgraded version of the package is available that resolves this issue...