5610 matches found
GHSA-X4GW-5CX5-PGMH vulnerabilities
Vulnerabilities for packages: apache-camel-karavan-devmode, strimzi-kafka-operator-fips, pinot, airbyte-server, apache-nifi-registry, spark, apache-pulsar-fips, s3proxy, opensearch, trino, elasticsearch-fips, kserve-modelmesh, ghidra, knative-kafka-broker-fips, kafbat-ui,...
GHSA-3QP7-7MW8-WX86 vulnerabilities
Vulnerabilities for packages: apache-camel-karavan-devmode, strimzi-kafka-operator-fips, pinot, airbyte-server, apache-nifi-registry, spark, apache-pulsar-fips, s3proxy, opensearch, trino, elasticsearch-fips, kserve-modelmesh, ghidra, knative-kafka-broker-fips, kafbat-ui,...
GHSA-QP9X-WP8F-QGJJ vulnerabilities
Vulnerabilities for packages: datadog-agent-fips, datadog-agent...
GHSA-6GHJ-FRRJ-JJJ3 vulnerabilities
Vulnerabilities for packages: thingsboard, pinot-fips, trino, hadoop-fips, management-api-for-apache-cassandra-4.1, celeborn, apache-hop-fips, tez, pinot, management-api-for-apache-cassandra-4.0, apache-hop, management-api-for-apache-cassandra-5.0, seata...
GHSA-3244-J874-RHC2 vulnerabilities
Vulnerabilities for packages: thingsboard, pinot-fips, trino, hadoop-fips, management-api-for-apache-cassandra-4.1, celeborn, apache-hop-fips, tez, pinot, management-api-for-apache-cassandra-4.0, apache-hop, management-api-for-apache-cassandra-5.0, seata...
CVE-2026-44890 vulnerabilities
Vulnerabilities for packages: thingsboard, pinot-fips, trino, hadoop-fips, management-api-for-apache-cassandra-4.1, celeborn, apache-hop-fips, tez, pinot, management-api-for-apache-cassandra-4.0, apache-hop, management-api-for-apache-cassandra-5.0, seata...
CVE-2026-44250 vulnerabilities
Vulnerabilities for packages: thingsboard, pinot-fips, trino, hadoop-fips, management-api-for-apache-cassandra-4.1, celeborn, apache-hop-fips, tez, pinot, management-api-for-apache-cassandra-4.0, apache-hop, management-api-for-apache-cassandra-5.0, seata...
PT-2026-47832
Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A remote peer can cause unbounded memory allocation leading to a Denial of Service and abnormal termination of an application acting as a QUIC client or server. This occurs when a malicious...
PT-2026-47836
Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A NULL pointer dereference can occur during the decryption of password-encrypted Cryptographic Message Syntax CMS messages. The issue arises because the OpenSSL CMS implementation dereference...
CVE-2026-42766
Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer dereference leads to an application crash and a Denial of Service. The CMS PasswordRecipientInfo.keyDerivationAlgorithm field is define...
CVE-2026-42770
Issue summary: When EVPPKEYderivesetpeer is called with a DHX X9.42 peer key, the peer key is not properly checked for the subgroup membership. Impact summary: A malicious peer which presents an X9.42 key carrying the victim's p and g parameters, a forged q = r a small prime factor of the cofacto...
PT-2026-47840
Name of the Vulnerable Software and Affected Versions OpenSSL FIPS modules versions 3.0, 3.4, 3.5, 3.6, and 4.0 Description When the EVP PKEY derive set peer function is called with a DHX X9.42 peer key, the software fails to properly verify subgroup membership. Specifically, the check Y^q ≡ 1 mo...
PT-2026-47844
Name of the Vulnerable Software and Affected Versions OpenSSL version 4.0 OpenSSL version 3.6 OpenSSL version 3.5 OpenSSL version 3.4 OpenSSL version 3.0 OpenSSL version 1.1.1 OpenSSL version 1.0.2 Description A use-after-free condition occurs during PKCS7 signature verification when processing a...
PT-2026-47834
Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A NULL pointer dereference occurs in the OpenSSL QUIC server when receiving a QUIC initial packet containing an invalid or expired token. This issue is triggered specifically when address...
PT-2026-47856
Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A heap out-of-bounds read can occur during CMS password-based decryption RFC 3211 / PWRI key unwrap when processing attacker-supplied CMS data. The issue arises in the kek unwrap key function...
CVE-2026-45133 vulnerabilities
Vulnerabilities for packages: zabbix-fips...
CVE-2026-45304 vulnerabilities
Vulnerabilities for packages: zabbix-fips...
CVE-2026-45305 vulnerabilities
Vulnerabilities for packages: zabbix-fips...