30143 matches found
Medium: webkitgtk4
Issue Overview: The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, macOS Sequoia 15.6, iOS 18.6 and iPadOS 18.6, tvOS 18.6, watchOS 11.6, visionOS 2.6. Processing maliciously crafted web content may lead to an unexpected Safari crash. CVE-2025-43213 The iss...
Medium: firefox
Issue Overview: A flaw was found in libexpat. A remote attacker could exploit this vulnerability by providing specially crafted XML content with empty external parameter entities. This could lead to a NULL pointer dereference, causing the application to crash and resulting in a Denial of Service...
OPENSUSE-SU-2026:10480-1 python313-3.13.12-3.1 on GA media
These are all security issues fixed in the python313-3.13.12-3.1 package on the GA media of openSUSE Tumbleweed...
rsync security update
3.2.5-3.2 - Resolves: RHEL-152888 - CVE-2025-10158 Out of bounds array access via negative index 3.2.5-3.1 - Resolves: RHEL-152879 - clearing DISPLAY breaks SSHASKPASS expectations...
Important: perl-YAML-Syck
Issue Overview: YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter. The heap overflow occurs when class names exceed the initial 512-byte allocation. The base64 decoder could read past the...
Open WebUI 授权问题漏洞
Open WebUI is an open-source, scalable, feature-rich, and user-friendly self-hosted WebUI. Versions of Open WebUI prior to 0.8.11 had vulnerabilities related to authorization issues, which stemmed from improper access control in tool values...
OPENSUSE-SU-2026:10472-1 conftest-0.67.1-2.1 on GA media
These are all security issues fixed in the conftest-0.67.1-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10469-1 python315-3.15.0~a7-3.1 on GA media
These are all security issues fixed in the python315-3.15.0a7-3.1 package on the GA media of openSUSE Tumbleweed...
Mbed TLS -- vulnerabilities
https://mbed-tls.readthedocs.io/en/latest/security-advisories/ reports: Client impersonation while resuming a TLS 1.3 session CVE-2026-34873 Entropy on Linux can fall back to /dev/urandom CVE-2026-34871 PSA random generator cloning CVE-2026-25835 Compiler-induced constant-time violations...
GHSA-M468-XCM6-FXG4 nginx-ui has Race Condition that Leads to Persistent Data Corruption and Service Collapse
Summary The nginx-ui application is vulnerable to a Race Condition. Due to the complete absence of synchronization mechanisms Mutex and non-atomic file writes, concurrent requests lead to the severe corruption of the primary configuration file app.ini. This vulnerability results in a persistent...
Amazon Linux 2023 : amazon-cloudwatch-agent (ALAS2023-2026-1473)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1473 advisory. net/http: memory exhaustion in Request.ParseForm CVE-2025-61726 archive/zip: denial of service when parsing arbitrary ZIP archives CVE-2025-61728 crypto/tls: handshake messages may be processe...
OPENSUSE-SU-2026:10463-1 netty-4.1.132-1.1 on GA media
These are all security issues fixed in the netty-4.1.132-1.1 package on the GA media of openSUSE Tumbleweed...
Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1514)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1514 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: fix reservation leak in some error paths when inserting inline extent CVE-2025-71268 In the Linux kernel, the followi...
OPENSUSE-SU-2026:10460-1 gdk-pixbuf-loader-libheif-1.21.2-2.1 on GA media
These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.21.2-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10458-1 MozillaFirefox-149.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-149.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10461-1 python311-nltk-3.9.4-1.1 on GA media
These are all security issues fixed in the python311-nltk-3.9.4-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10452-1 libjavamapscript-8.6.1-1.1 on GA media
These are all security issues fixed in the libjavamapscript-8.6.1-1.1 package on the GA media of openSUSE Tumbleweed...
SUSE SLES12 Security Update : kernel (Live Patch 67 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:1088-1)
The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1088-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.255 fixes various security issues The following security issues were fixed: -...