SUSE CVE-2026-32741

libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and below contain a heap buffer overflow in MaskImageCodec::decodemaskimage. When decoding a HEIF file containing a mask image mski, the function copies the full iloc extent data into a pixel buffer using memcpydst,...

SUSE CVE-2026-32814

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, when decoding a HEIF grid image with strictdecoding=false the default, a corrupted tile silently fails to decode and the library returns heiferrorOk with no indication of failure, leading to an uninitialized...

Exploit for Injection in Traceroute_Project Traceroute

node-vulnerable This repository is a synthetic demo target...

PT-2026-54042

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-22 Description A division by zero issue exists during binomial kernel processing. An attacker can provide a large binomial kernel value that triggers an integer overflow, leading to a division by zero and...

PT-2026-42681

Name of the Vulnerable Software and Affected Versions FlaskBB affected versions not specified Description A Server-Side Request Forgery SSRF exists where authenticated users can force the server to send HTTP requests to arbitrary internal endpoints, such as cloud metadata services. This is a blin...

PT-2026-42535

Name of the Vulnerable Software and Affected Versions Concrete CMS versions prior to 9.5.1 Description Concrete CMS fails to sanitize path traversal sequences in the ptComposerFormLayoutSetControlCustomTemplate field during the process of saving page type composer form layouts. An authenticated...

CVE-2026-39882 affecting package azurelinux-image-tools for versions less than 1.3.0-1

CVE-2026-39882 affecting package azurelinux-image-tools for versions less than 1.3.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-29181 affecting package azurelinux-image-tools for versions less than 1.3.0-1

CVE-2026-29181 affecting package azurelinux-image-tools for versions less than 1.3.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-24218

NVIDIA DGX OS contains a vulnerability in the factory provisioning process, where the cloning of a base image causes identical SSH host keys to be deployed across multiple systems. The sharing of cryptographic identifiers across all similarly provisioned systems enables host impersonation or...

CVE-2026-45737 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argo-cd...

GHSA-RG3G-4RW9-GQRP vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argo-cd...

GHSA-H98R-WV3H-FR38 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argo-cd...

CVE-2026-45738 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argo-cd...

CVE-2026-45737 vulnerabilities

Vulnerabilities for packages: argo-cd, argocd-image-updater-fips, argocd-image-updater...

GHSA-RG3G-4RW9-GQRP vulnerabilities

Vulnerabilities for packages: argo-cd, argocd-image-updater-fips, argocd-image-updater...

GHSA-H98R-WV3H-FR38 vulnerabilities

Vulnerabilities for packages: argo-cd, argocd-image-updater-fips, argocd-image-updater...

CVE-2026-45738 vulnerabilities

Vulnerabilities for packages: argo-cd, argocd-image-updater-fips, argocd-image-updater...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: bom, kubevela-fips, trivy-operator, guac, dagger, amazon-ssm-agent-fips, zot, k9s, act, trufflehog-fips, snyk-cli, trivy, argo-workflows-fips, grafana-fips, gitlab-runner-fips, pulumi, cloudbeat, kyverno-fips, rancher-fleet, argocd-image-updater,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: bom, kubevela-fips, trivy-operator, guac, dagger, amazon-ssm-agent-fips, zot, k9s, act, trufflehog-fips, snyk-cli, trivy, argo-workflows-fips, grafana-fips, gitlab-runner-fips, pulumi, cloudbeat, kyverno-fips, rancher-fleet, argocd-image-updater,...

CVE-2026-24218

CVE-2026-24218 affects NVIDIA DGX OS. The vulnerability arises during factory provisioning: cloning a base image deploys identical SSH host keys across multiple systems, enabling host impersonation or attacker-in-the-middle attacks. Consequences listed include potential code execution, data tampe...