30913 matches found
EUVD-2026-59585
In the Linux kernel, the following vulnerability has been resolved: crypto: sun4i-ss - Remove insecure and unused rngalg Remove sun4issrng, as it is insecure and unused: - It has multiple vulnerabilities. sun4issprngseed is missing locking and has a buffer overflow. sun4issprnggenerate fails to...
CVE-2026-74438 crypto: sun4i-ss - Remove insecure and unused rng_alg
In the Linux kernel, the following vulnerability has been resolved: crypto: sun4i-ss - Remove insecure and unused rngalg Remove sun4issrng, as it is insecure and unused: - It has multiple vulnerabilities. sun4issprngseed is missing locking and has a buffer overflow. sun4issprnggenerate fails to...
GHSA-MPC3-HQR8-W5F3 vulnerabilities
Vulnerabilities for packages: gnupg...
EUVD-2026-58819
A flaw was found in Red Hat Quay. An administrator of any repository, by knowing or guessing a target notification's Universally Unique Identifier UUID, can read the notification configuration, including sensitive details like webhook URLs, Slack tokens, and email addresses. This vulnerability al...
GHSA-H4MF-4V27-HGGJ vulnerabilities
Vulnerabilities for packages: telegraf...
GHSA-8V25-V8P6-QF7V vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-49980 vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-41179 vulnerabilities
Vulnerabilities for packages: telegraf...
GHSA-45PQ-889G-FCGH vulnerabilities
Vulnerabilities for packages: telegraf...
GHSA-4VR5-P2GC-H23P vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-59733 vulnerabilities
Vulnerabilities for packages: telegraf...
GO-2026-4964 vulnerabilities
Vulnerabilities for packages: telegraf...
GHSA-FPMH-VX4H-XC33 OpenAM Insecure SSO Cookie Initialization
Summary Description An Insecure Default Initialization of Resource CWE-1188 issue in the OpenAM default configuration ships the iPlanetDirectoryPro SSO cookie with HttpOnly=false. Also, the iPlanetDirectoryPro SSO cookie is used as a CSRF token in OAuth/OIDC flows. This affects OpenAM Community...
Insecure Randomness
Spring AMQP is vulnerable to Predictable Correlation Identifier vulnerability as per NVD Description or CWE-330. The vulnerability is due to correlation IDs for RabbitTemplate.sendAndReceive replies being generated using a predictable internal counter, which allows an attacker to predict...
Insecure Temporary File
Spring Boot is vulnerable to Insecure Temporary File. The vulnerability is due to the use of a predictable static directory for the embedded Artemis broker's data, which allows a local attacker to pre-create or replace the directory with a symlink and potentially redirect broker file operations t...
CVE-2026-19870
The CVE-2026-19870 entry concerns Roskus Prospero Flow CRM (vendor Roskus) prior to version 5.15.10. It is an IDOR in the payroll module where authenticated users with read payroll permission can view salary and banking details of employees from other companies, and users with create payroll perm...
Insecure Trusted-Package Validation
Spring for Apache Pulsar is vulnerable to an insecure trusted-package validation. The vulnerability is due to JsonPulsarHeaderMapper using a prefix-based check for trusted packages and treating an empty trusted-packages configuration as trusting all packages, which allows an attacker to potential...
GO-2026-5596 vulnerabilities
Vulnerabilities for packages: telegraf...