5725 matches found
PT-2026-35750
Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.2 through 2.33 GNU C Library version 2.34 affected versions not specified Description The deprecated functions ns printrrf, ns printrr, and fp nquery fail to validate RDATA content against the RDATA length in a DNS...
GNU C Library 安全漏洞
The GNU C Library is an open-source, free C-language compiler program published by the GNU community under the LGPL license. Versions of the GNU C Library 2.2 and later contain security vulnerabilities. These vulnerabilities arise when functions such as nsprintrrf, nsprintrr, and fpnquery handle...
JLSEC-2026-223 openssl-src NULL pointer Dereference in `signature_algorithms` processing
An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signaturealgorithms extension where it was present in the initial ClientHello, but includes a signaturealgorithmscert extension then a NU...
CVE-2026-29181 vulnerabilities
Vulnerabilities for packages: crossplane-provider-family-aws-fips, chartmuseum-fips, nerdctl, crossplane-provider-aws-secretsmanager, kubernetes-csi-driver-hostpath, cloudflared, crossplane-provider-aws-emrserverless-fips, net-kourier-fips, spark-operator, vault-fips, neuvector-scanner-fips,...
GHSA-PJCQ-XVWQ-HHPJ vulnerabilities
Vulnerabilities for packages: telegraf, cert-manager, grafana, zot, yunikorn-k8shim, terraform, juicefs, external-secrets-operator, kyverno-notation-aws, nuclei, ratify, seaweedfs, percona-server-mongodb-operator, bento, opentofu, cert-manager-csi-driver, flux-source-controller, rclone,...
CVE-2026-32952 vulnerabilities
Vulnerabilities for packages: cert-manager-cmctl-fips, ldap2pg, neuvector-fips, xeol-fips, kyverno-notation-aws, gitea-fips, versitygw-fips, versitygw, cert-manager-csi-driver-fips, rancher, agentbeat-fips, opentofu-fips, xeol, bento-fips, vault-fips, cloudbeat, trufflehog-fips, gitlab-runner,...
GHSA-PJCQ-XVWQ-HHPJ vulnerabilities
Vulnerabilities for packages: cert-manager-cmctl-fips, ldap2pg, neuvector-fips, xeol-fips, kyverno-notation-aws, gitea-fips, versitygw-fips, versitygw, cert-manager-csi-driver-fips, rancher, agentbeat-fips, opentofu-fips, xeol, bento-fips, vault-fips, cloudbeat, trufflehog-fips, gitlab-runner,...
CVE-2026-4313
creationtimestamp| type| source ---|---|--- 2026-04-24 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/04/CVE-2026-4313...
CVE-2026-6887
creationtimestamp| type| source ---|---|--- 2026-04-23 00:58:00+00:00| seen| https://www.twcert.org.tw/en/cp-139-10863-2f48e-2.html 2026-04-23 10:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116453554799004892 2026-04-23 10:30:31+00:00| seen|...
SUSE SLES16 Security Update : strongswan (SUSE-SU-2026:21203-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:21203-1 advisory. Update to strongswan 6.0.4: - CVE-2025-9615: NetworkManager File Access bsc1257359. - CVE-2026-25075: Integer Underflow When...
CVE-2026-6756
creationtimestamp| type| source ---|---|--- 2026-04-21 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260422 2026-04-22 17:24:29+00:00| seen| Telegram/GWv-rb7UfXBXuTinSPZbLsKECuSpybC90nlKZTm2UKU7Bs...
CVE-2026-6778
creationtimestamp| type| source ---|---|--- 2026-04-21 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260422...
CVE-2026-6775
creationtimestamp| type| source ---|---|--- 2026-04-21 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260422...
CVE-2026-6755
creationtimestamp| type| source ---|---|--- 2026-04-21 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260422...
CVE-2026-6783
creationtimestamp| type| source ---|---|--- 2026-04-21 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260422...
CVE-2026-6777
creationtimestamp| type| source ---|---|--- 2026-04-21 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260422...
CVE-2026-6780
creationtimestamp| type| source ---|---|--- 2026-04-21 19:25:08+00:00| seen| Telegram/sOCPjtJD4k5MvWwp6dRuETsdkHJ60TzeO4tn1nY4b7uMQ 2026-04-21 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/mozilla-products-multiple-vulnerabilities20260422...
oxia 信任管理问题漏洞
Oxia is a distributed metadata storage and coordination system developed by Oxia OpenSource. Versions of Oxia prior to 0.16.2 contained vulnerabilities related to trust management. These vulnerabilities stemmed from the trustedCertPool function in TLS configuration, which only parsed the first PE...
CVE-2026-5958
creationtimestamp| type| source ---|---|--- 2026-04-20 03:55:00+00:00| seen| https://cert.pl/en/posts/2026/04/CVE-2026-5958 2026-04-24 13:30:23+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkan46tfml2w 2026-05-04 16:27:13+00:00| seen|...
ROS-20260420-73-0016
A vulnerability in the maxcertlist parameter of certificate compression in TLS 1.3 of the OpenSSL library is related to uncontrolled memory allocation. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...