325705 matches found
GO-2023-2073 vulnerabilities
Vulnerabilities for packages: croc...
GO-2024-2528 vulnerabilities
Vulnerabilities for packages: dgraph...
GO-2024-2529 vulnerabilities
Vulnerabilities for packages: dgraph...
GO-2026-5106 vulnerabilities
Vulnerabilities for packages: cloudnative-pg...
GO-2026-4775 vulnerabilities
Vulnerabilities for packages: caddy...
GO-2024-2459 vulnerabilities
Vulnerabilities for packages: caddy, frp...
GO-2024-2842 vulnerabilities
Vulnerabilities for packages: skopeo, buildah, zot...
GO-2026-5885 vulnerabilities
Vulnerabilities for packages: helm-set-status, falcoctl, cert-manager-cmctl, ratify, steampipe, maru, argocd-image-updater, kubescape, eksctl, oras, helm-operator, kargo, argo-cd, k9s, k8sgpt, gitness, cluster-api-helm-controller, kube-arangodb, manifest-tool, tigera-operator, zarf,...
GO-2024-2599 vulnerabilities
Vulnerabilities for packages: litefs, dask-gateway, terraform-docs, direnv, dgraph, tailscale, gomplate, configmap-reload, kubewatch, helm-operator, aws-flb-firehose, controller-gen, shfmt, ferretdb, amass, nri-prometheus, vault-k8s, stakater-reloader, pombump, k3d, kubernetes-dns-node-cache,...
GO-2026-4338 vulnerabilities
Vulnerabilities for packages: dask-gateway, terraform-docs, gcp-compute-persistent-disk-csi-driver, helm-operator, kuma, jaeger, minio-object-browser, croc, kserve-modelmesh-serving, nri-nginx, kubernetes-csi-livenessprobe, actions-runner-controller, newrelic-fluent-bit-output, age, grpcurl,...
CVE-2026-73074
A flaw was found in Vim, an open-source command-line text editor. An integer overflow vulnerability exists in the propaddone function when handling text properties. By adding a large number of text properties to a single line, a 16-bit counter can wrap around to zero, leading to an undersized hea...
Security Bulletin: IBM Engineering Lifecycle Management products using IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service (CVE-2026-4410)
Summary IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service CVE-2026-4410 caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. This affects...
Client HttpTransport SSE buffer grows unbounded when server withholds the event delimiter
More info at https://github.com/modelcontextprotocol/php-sdk/security/advisories/GHSA-7m52-jw36-44r3...
bind9.16 security update
An update is available for bind9.16. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Berkeley Internet Name Domain BIND is an implementation of the Domain Na...
SecurePoint UTM 12.x Session ID Leak
An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi allows sessionid information disclosure via an invalid authentication attempt. This can afterwards be used to bypass the device's authentication and get access to the administrative interface. id:...
Citrix Netscaler ADC & Gateway - Out-Of-Bounds Memory Read
The vulnerability would enable an attacker to remotely obtain sensitive information from a NetScaler appliance configured as a Gateway or AAA virtual server via a very commonly connected Web interface, and without requiring authentication. This bug is nearly identical to the Citrix Bleed...
Securepoint UTM - Leaking Remote Memory Contents
An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi allows information disclosure of memory contents to be achieved by an authenticated user. Essentially, uninitialized data can be retrieved via an approach in which a sessionid is obtained but not use...
IBM Maximo Asset Management Information Disclosure - XML External Entity Injection
IBM Maximo Asset Management is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. id: CVE-2020-4463 info: name: IBM Maximo Asset Management Information...
