SUSE CVE-2020-15157

In containerd an industry-standard container runtime before version 1.2.14 there is a credential leaking vulnerability. If a container image manifest in the OCI Image format or Docker Image V2 Schema 2 format includes a URL for the location of a specific image layer otherwise known as a “foreign...

SUSE CVE-2026-32740

libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and prior contain a heap-buffer-overflow write vulnerability in the grid tile compositing, allowing an attacker to write 64 bytes of fully attacker-controlled data past the end of a chroma plane heap allocation by craftin...

SUSE CVE-2026-32741

libheif is a HEIF and AVIF file format decoder and encoder. Versions 1.21.2 and below contain a heap buffer overflow in MaskImageCodec::decodemaskimage. When decoding a HEIF file containing a mask image mski, the function copies the full iloc extent data into a pixel buffer using memcpydst,...

SUSE CVE-2026-32814

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and prior, when decoding a HEIF grid image with strictdecoding=false the default, a corrupted tile silently fails to decode and the library returns heiferrorOk with no indication of failure, leading to an uninitialized...

Exploit for Injection in Traceroute_Project Traceroute

node-vulnerable This repository is a synthetic demo target...

PT-2026-54042

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-22 Description A division by zero issue exists during binomial kernel processing. An attacker can provide a large binomial kernel value that triggers an integer overflow, leading to a division by zero and...

PT-2026-42681

Name of the Vulnerable Software and Affected Versions FlaskBB affected versions not specified Description A Server-Side Request Forgery SSRF exists where authenticated users can force the server to send HTTP requests to arbitrary internal endpoints, such as cloud metadata services. This is a blin...

PT-2026-42535

Name of the Vulnerable Software and Affected Versions Concrete CMS versions prior to 9.5.1 Description Concrete CMS fails to sanitize path traversal sequences in the ptComposerFormLayoutSetControlCustomTemplate field during the process of saving page type composer form layouts. An authenticated...

CVE-2026-39882 affecting package azurelinux-image-tools for versions less than 1.3.0-1

CVE-2026-39882 affecting package azurelinux-image-tools for versions less than 1.3.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-29181 affecting package azurelinux-image-tools for versions less than 1.3.0-1

CVE-2026-29181 affecting package azurelinux-image-tools for versions less than 1.3.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-24218

NVIDIA DGX OS contains a vulnerability in the factory provisioning process, where the cloning of a base image causes identical SSH host keys to be deployed across multiple systems. The sharing of cryptographic identifiers across all similarly provisioned systems enables host impersonation or...

CVE-2026-45737 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argo-cd...

GHSA-RG3G-4RW9-GQRP vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argo-cd...

GHSA-H98R-WV3H-FR38 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argo-cd...

CVE-2026-45738 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argo-cd...

CVE-2026-45737 vulnerabilities

Vulnerabilities for packages: argo-cd, argocd-image-updater-fips, argocd-image-updater...

GHSA-RG3G-4RW9-GQRP vulnerabilities

Vulnerabilities for packages: argo-cd, argocd-image-updater-fips, argocd-image-updater...

GHSA-H98R-WV3H-FR38 vulnerabilities

Vulnerabilities for packages: argo-cd, argocd-image-updater-fips, argocd-image-updater...

CVE-2026-45738 vulnerabilities

Vulnerabilities for packages: argo-cd, argocd-image-updater-fips, argocd-image-updater...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: bom, kubevela-fips, trivy-operator, guac, dagger, amazon-ssm-agent-fips, zot, k9s, act, trufflehog-fips, snyk-cli, trivy, argo-workflows-fips, grafana-fips, gitlab-runner-fips, pulumi, cloudbeat, kyverno-fips, rancher-fleet, argocd-image-updater,...