1041191 matches found
Important: Red Hat Security Advisory: Satellite 6.17.9.1 Async Update
A new release is now available for Red Hat Satellite 6.17 for RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
Important: Red Hat Security Advisory: Red Hat Quay 3.12.20
Red Hat Quay 3.12.20 is now available with bug fixes. Quay 3.12.20...
EUVD-2026-46030
xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap out-of-bounds read vulnerability within the FIPS-specific receive paths. This vulnerability does not affect the default configuration of xrdp. The vulnerability is only exploitable when the security layer is set to...
CVE-2026-35591
libvips is a fast image processing library with low memory needs. The tiffload operation in libvips versions before and including 8.18.1 could incorrectly determine the number of channels in a JPEG or JPEG2000-encoded tile within a TIFF image, leading to a possible buffer overflow. This has been...
EUVD-2026-46001
libvips is a fast image processing library with low memory needs. On 32-bit systems in versions before and including 8.18.0, the gifload operation could incorrectly determine dimensions leading to an integer overflow. This has been patched in version 8.18.1...
CVE-2026-45712
Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the screenshot/print proxy /proxy?data=… maintains a package-level assets mapstringMessageAssets cache, but reads the map without holding assetsMutex while a long-running cleanup goroutine and re-entrant CSS-rewriti...
DEBIAN-CVE-2026-26199
HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If H5Igetname is invoked on a group id with 0 for the size parameter, it will underflow when trying to place a null terminator in the buffer. This can occur if H5Igetname is invoked in a way...
CVE-2026-46428 lettre has TLS hostname verification disabled when using Boring TLS backend
lettre is a a mailer library for Rust. Starting in version 0.10.1 and prior to version 0.11.22, an inverted-boolean bug in lettre's boring-tls integration silently disables TLS hostname verification for callers using the default strict configuration. An on-path attacker presenting any chain-valid...
chromium-browser: libyuv: chromium-browser: Heap buffer overflow in libyuv
A heap buffer overflow flaw was found in the libyuv component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514748734...
EUVD-2026-45970
HDF5 is a high-performance library and a file format specification that implements the HDF5 data model. If H5Igetname is invoked on a group id with 0 for the size parameter, it will underflow when trying to place a null terminator in the buffer. This can occur if H5Igetname is invoked in a way...
bbscope — Updated!
bbscope.com Web interface and API for aggregating bug bounty program scopes from HackerOne, Bugcrowd, Intigriti, and YesWeHack. Quick start Docker root@kitploit: cd website cp .env.example .env Edit .env — at minimum set POSTGRESPASSWORD and your platform credentials docker compose up -d --build...
UBUNTU-CVE-2026-64621
FreeRDP before 3.28.0 affected 3.x through 3.27.1 contains a double-free vulnerability in freerdpclientrdpfileapplytosettings client/common/file.c when parsing the selectedmonitors field of a .rdp connection file. The MonitorIds array is allocated through the settings object, and a raw non-owning...
EUVD-2026-45917
SurrealDB versions before 3.1.0 fail to enforce table SELECT permissions when traversing graph edges or back-references. Authenticated users can read records from any table reachable through graph edges regardless of the target table's PERMISSIONS FOR select clause...
RHSA-2026:41892 Red Hat Security Advisory: libtiff security, bug fix, and enhancement update
Bulletin has no description...
Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.18.25 security, enhancement & bug fix update
Red Hat OpenShift Data Foundation 4.18.25 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.18.25 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-7343: RHODF 4.18.25 release DFBUGS-7010: GSS kube-rbac-proxy in OCS metrics exporter logging full bearer...
PT-2026-61633
Name of the Vulnerable Software and Affected Versions libvips versions prior to 8.18.1 Description On 32-bit systems, the gifload operation can incorrectly determine image dimensions, resulting in an integer overflow. An integer overflow occurs when an arithmetic operation attempts to create a...
ALSA-2026:41949 Important: python3.14 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
CVE-2026-26080
HAProxy Community Edition 3.2.x through 3.3.x before 3.3.3 can enter a loop or crash because varint is mishandled. HAProxy Enterprise and ALOHA are also affected...
PT-2026-61635
Name of the Vulnerable Software and Affected Versions libvips versions prior to 8.18.2 Description The EXIF decoder fails to verify the range of EXIF tag groups before passing data to libexif. This lack of validation can lead to a null pointer dereference, which is a condition where the software...
PT-2026-61636
Name of the Vulnerable Software and Affected Versions libvips versions prior to 8.18.2 Description The tiffload operation can incorrectly determine the number of channels in a JPEG or JPEG2000-encoded tile within a TIFF image, which may lead to a buffer overflow. A buffer overflow occurs when a...