196251 matches found
CVE-2026-107814 MariaDB: Insecure $HOME in MariaDB rpm packages
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory. A database user with the FILE privilege...
CVE-2026-107814
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory. A database user with the FILE privilege...
CVE-2026-107814
MariaDB server RPM packages (versions 10.6.1 to 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2) are vulnerable due to the mysql service account being created with the database data directory as its home directory. A database user possessing the FILE privilege can write startup dot-files, ...
CLEANSTART-2026-NH44106 gRPC-Go is the Go language implementation of gRPC
CVE-2026-33186 affects multiple packages. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-SG10675 incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs
CVE-2026-46597 affects multiple packages. An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs. See references for individual vulnerability details...
CLEANSTART-2026-AF18240 When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface
CVE-2026-56853 affects multiple packages. When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. See references for individual vulnerability details...
CLEANSTART-2026-UE43947 Previously, resolving relative paths containing parent directory ('
CVE-2026-56860 affects multiple packages. Previously, resolving relative paths containing parent directory '. See references for individual vulnerability details...
PT-2026-108973
Name of the Vulnerable Software and Affected Versions MariaDB versions 10.6.1 through 10.6.27 MariaDB version 10.11.18 and earlier MariaDB version 11.4.12 and earlier MariaDB version 11.8.8 and earlier MariaDB version 12.3.2 and earlier MariaDB version 13.0.1 and earlier Description In RPM...
CVE-2026-107814: Incorrect Permission Assignment for Critical Resource
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory. A database user with the FILE privilege...
CLEANSTART-2026-PK10148 Netty is an asynchronous, event-driven network application framework
CVE-2026-59903 affects multiple packages. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details...
CLEANSTART-2026-LU91275 Netty is an asynchronous, event-driven network application framework
CVE-2026-42583 affects multiple packages. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details...
CLEANSTART-2026-FG43911 Netty is an asynchronous, event-driven network application framework
CVE-2026-59901 affects multiple packages. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details...
CLEANSTART-2026-RF04953 Netty is a network application framework for development of protocol servers and clients
CVE-2026-55833 affects multiple packages. Netty is a network application framework for development of protocol servers and clients. See references for individual vulnerability details...
CLEANSTART-2026-YF85147 Netty is an asynchronous, event-driven network application framework
CVE-2026-42585 affects multiple packages. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details...
CLEANSTART-2026-ET03364 Netty is a network application framework for development of protocol servers and clients
CVE-2026-55831 affects multiple packages. Netty is a network application framework for development of protocol servers and clients. See references for individual vulnerability details...
CLEANSTART-2026-XF04805 On Unix systems, opening a file in an os
CVE-2026-39822 affects multiple packages. On Unix systems, opening a file in an os. See references for individual vulnerability details...
CLEANSTART-2026-GD90779 When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface
CVE-2026-56853 affects multiple packages. When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. See references for individual vulnerability details...
CLEANSTART-2026-KO38637 Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS
CVE-2026-56858 affects multiple packages. Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS. See references for individual vulnerability details...
CLEANSTART-2026-NF29170 OpenTelemetry-Go is the Go implementation of OpenTelemetry
CVE-2026-24051 affects multiple packages. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...
CLEANSTART-2026-DX35599 gRPC-Go is the Go language implementation of gRPC
CVE-2026-84303 affects multiple packages. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...