52615 matches found
CVE-2026-5919 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-QCVG-HWR7-R9V7 vulnerabilities
Vulnerabilities for packages: chromium...
SUSE CVE-2026-6309
Use after free in Viz in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
USN-8184-1: Linux kernel (Real-time) vulnerabilities
Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issue to cause load malicious CPU microcod...
CVE-2026-23778
Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.50, contain a command injection vulnerability. A high privileged attacker with...
CVE-2026-26171 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap, promitor, dotnet-sdk-stage0, powershell, dotnet-sdk, dotnet...
GHSA-37GX-XXP4-5RGX vulnerabilities
Vulnerabilities for packages: promitor, dotnet-sdk-stage0, powershell, dotnet-sdk, dotnet, dotnet-bootstrap...
GHSA-H383-GMXW-35V2 vulnerabilities
Vulnerabilities for packages: logstash-fips, opensearch, logstash, druid, nuxeo, pinot-fips, sonarqube, kafka-fips, spark-fips, zaproxy, geoserver, celeborn, pinot, commercial-elasticsearch, kafka, hadoop-fips, flink, spark, elasticsearch-fips, solr, akhq, kserve-modelmesh, elasticsearch...
CVE-2026-35554 vulnerabilities
Vulnerabilities for packages: opensearch, logstash, druid, knative-kafka-broker, debezium, debezium-connector-spanner, strimzi-kafka-operator-fips, debezium-connector-informix, strimzi-kafka-operator, seata, apache-nifi, knative-kafka-broker-fips, wildfly, thingsboard, debezium-connector-db2,...
Red Hat Ansible Automation Platform（Red Hat AAP） 安全漏洞
The Red Hat Ansible Automation Platform Red Hat AAP is a unified solution for strategic automation provided by Red Hat, Inc. There is a security vulnerability in the Red Hat Ansible Automation Platform Red Hat AAP, which stems from improper input cleaning of the toolsetroute parameter. This...
Denial of service in static resource handling on Windows platforms
Spring MVC and WebFlux applications are vulnerable to Denial of Service attacks when resolving static resources. More precisely, an application can be vulnerable when all the following are true: When all the conditions above are met, the attacker can send malicious requests that are slow to resol...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007258)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007258 advisory. In the Linux kernel, the following vulnerability has been resolved: vfio/platform: Create persistent IRQ handlers The vfio-platform SETIRQS ioctl currently allows...
ROS-20260417-73-0014
Vulnerability in python-PyPDF2 related to unrestricted resource allocation. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...
ROS-20260417-73-0035
Vulnerability in zabbix7.2 related to failure to take measures to protect sql query structure. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code...
ROS-20260417-73-0005
Vulnerability in frr related to null pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
ROS-20260417-73-0002
Vulnerability in frr related to null pointer dereferencing. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
ROS-20260417-73-0038
Vulnerability in zabbix7.2 is related to failure to take measures to neutralize special elements used in operating system commands. Exploitation of the vulnerability may allow an attacker acting remotely to execute arbitrary commands...
DNN 安全漏洞
DNN also known as DotNetNuke is an open-source content management system CMS developed by the American company DNN, supported by Microsoft and based on the ASP.NET platform. This system features easy installation, scalability, and rich functionality. Versions of DNN prior to 10.2.2 contained...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-007452)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-007452 advisory. In the Linux kernel, the following vulnerability has been resolved: serial: arcuart: fix ofiomap leak in arcserialprobe Smatch reports:...