DEBIAN-CVE-2026-6238

The deprecated functions nsprintrrf, nsprintrr and fpnquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LOC, TKEY or TSIG records, which may allow an attacker to craft a DNS response,...

CVE-2026-6238

The deprecated functions nsprintrrf, nsprintrr and fpnquery in the GNU C Library version 2.0.1 to version 2.43 fail to validate the RDATA content against the RDATA length in a DNS response when processing A6, CERT, LOC, TKEY or TSIG records, which may allow an attacker to craft a DNS response,...

CVE-2026-40556

creationtimestamp| type| source ---|---|--- 2026-04-28 06:20:00+00:00| seen| https://cert.pl/en/posts/2026/04/CVE-2026-40556 2026-04-28 16:50:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkl25fsldf2o...

PT-2026-35750

Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.2 through 2.33 GNU C Library version 2.34 affected versions not specified Description The deprecated functions ns printrrf, ns printrr, and fp nquery fail to validate RDATA content against the RDATA length in a DNS...

GNU C Library 安全漏洞

The GNU C Library is an open-source, free C-language compiler program published by the GNU community under the LGPL license. Versions of the GNU C Library 2.2 and later contain security vulnerabilities. These vulnerabilities arise when functions such as nsprintrrf, nsprintrr, and fpnquery handle...

JLSEC-2026-223 openssl-src NULL pointer Dereference in `signature_algorithms` processing

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signaturealgorithms extension where it was present in the initial ClientHello, but includes a signaturealgorithmscert extension then a NU...

CVE-2026-29181 vulnerabilities

Vulnerabilities for packages: step-ca, kubernetes-csi-node-driver-registrar-fips, crossplane-provider-aws-cloudfront, eksctl, crossplane-provider-aws-memorydb, cadence, opentofu, gitlab-runner-fips, ko-fips, cadvisor-fips, flux-image-automation-controller, cert-manager-cmctl-fips,...

GHSA-PJCQ-XVWQ-HHPJ vulnerabilities

Vulnerabilities for packages: minio, xeol, cert-manager, cert-manager-istio-csr, bento, kyverno, openbao, teleport, frp, telegraf, rancher, external-secrets-operator, terraform, k6, yunikorn-k8shim, zot, ratify, opentofu, sftpgo-plugin-auth, dex, gitlab-runner, rclone, gitea, spqr, juicefs,...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver, flux-fips, gitea-fips, zitadel, rancher-webhook, opentofu, bento-fips, gitlab-runner-fips, cert-manager-cmctl-fips, cert-manager-google-cas-issuer-fips, harbor-fips, seaweedfs-rocksdb, elastic-agent-fips, syncthing, cert-manager-cmctl,...

GHSA-PJCQ-XVWQ-HHPJ vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver, flux-fips, gitea-fips, zitadel, rancher-webhook, opentofu, bento-fips, gitlab-runner-fips, cert-manager-cmctl-fips, cert-manager-google-cas-issuer-fips, harbor-fips, seaweedfs-rocksdb, elastic-agent-fips, syncthing, cert-manager-cmctl,...

CVE-2026-4313

creationtimestamp| type| source ---|---|--- 2026-04-24 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/04/CVE-2026-4313...

CVE-2026-6887

creationtimestamp| type| source ---|---|--- 2026-04-23 00:58:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10863-2f48e-2.html 2026-04-23 10:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116453554799004892 2026-04-23 10:30:31+00:00| seen|...

SUSE SLES16 Security Update : strongswan (SUSE-SU-2026:21203-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:21203-1 advisory. Update to strongswan 6.0.4: - CVE-2025-9615: NetworkManager File Access bsc1257359. - CVE-2026-25075: Integer Underflow When...

CVE-2026-6756

creationtimestamp| type| source ---|---|--- 2026-04-21 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260422 2026-04-22 17:24:29+00:00| seen| Telegram/GWv-rb7UfXBXuTinSPZbLsKECuSpybC90nlKZTm2UKU7Bs...

CVE-2026-6778

creationtimestamp| type| source ---|---|--- 2026-04-21 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260422...

CVE-2026-6755

creationtimestamp| type| source ---|---|--- 2026-04-21 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260422...

CVE-2026-6775

creationtimestamp| type| source ---|---|--- 2026-04-21 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260422...

CVE-2026-6783

creationtimestamp| type| source ---|---|--- 2026-04-21 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260422...

CVE-2026-6777

creationtimestamp| type| source ---|---|--- 2026-04-21 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260422...

CVE-2026-6780

creationtimestamp| type| source ---|---|--- 2026-04-21 19:25:08+00:00| seen| Telegram/sOCPjtJD4k5MvWwp6dRuETsdkHJ60TzeO4tn1nY4b7uMQ 2026-04-21 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260422...