GHSA-F4V5-65JJ-PCR2 vulnerabilities

Vulnerabilities for packages: kafka, neo4j, kafka-fips...

GHSA-5XPP-75JX-M839 vulnerabilities

Vulnerabilities for packages: homepage...

GHSA-4MP9-239F-G9HG vulnerabilities

Vulnerabilities for packages: apache-pulsar, kayenta-fips, cloudwatch-exporter, infinispan, apicurio-registry, hono, flyway, floci-az, keycloak, s3proxy, kafbat-ui, knative-kafka-broker, reposilite, flyway-fips, nuxeo, request-9047-keycloak-fips, apicurio-registry-fips, kayenta,...

GHSA-JPPX-W49H-X2QQ vulnerabilities

Vulnerabilities for packages: apache-pulsar, kayenta-fips, cloudwatch-exporter, infinispan, apicurio-registry, hono, flyway, floci-az, keycloak, s3proxy, kafbat-ui, knative-kafka-broker, reposilite, flyway-fips, nuxeo, request-9047-keycloak-fips, apicurio-registry-fips, kayenta,...

GHSA-Q4F6-JM68-57WW vulnerabilities

Vulnerabilities for packages: apache-pulsar, kayenta-fips, cloudwatch-exporter, infinispan, apicurio-registry, hono, flyway, floci-az, keycloak, s3proxy, kafbat-ui, knative-kafka-broker, reposilite, flyway-fips, nuxeo, request-9047-keycloak-fips, apicurio-registry-fips, kayenta,...

GHSA-6CQP-G7GG-8HR5 vulnerabilities

Vulnerabilities for packages: apache-pulsar, kayenta-fips, cloudwatch-exporter, infinispan, apicurio-registry, hono, flyway, floci-az, keycloak, s3proxy, kafbat-ui, knative-kafka-broker, reposilite, flyway-fips, nuxeo, request-9047-keycloak-fips, apicurio-registry-fips, kayenta,...

GHSA-G7HG-VRCF-MVMR vulnerabilities

Vulnerabilities for packages: tez, thingsboard...

GHSA-WC96-39FC-566F vulnerabilities

Vulnerabilities for packages: tez, thingsboard...

CVE-2026-56820 vulnerabilities

Vulnerabilities for packages: tez, thingsboard...

CVE-2026-55833 vulnerabilities

Vulnerabilities for packages: infinispan, apicurio-registry, flyway, cloudwatch-exporter...

CVE-2026-56745 vulnerabilities

Vulnerabilities for packages: infinispan, apicurio-registry, flyway, cloudwatch-exporter...

CVE-2026-16806

A flaw was found in WebMCP, a component of Google Chrome. This vulnerability, known as a use-after-free, allows a remote attacker to execute arbitrary code within the browser's security sandbox. This can occur when a user visits a specially crafted HTML page, potentially leading to unauthorized...

CVE-2026-56392

GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop -t values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted...

Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say

Redis shipped seven security releases on July 23 after researchers published authenticated RCE PoCs for stock Redis 6.2.22, 7.4.9, 8.6.4, and 8.8.0. All four chains require RESTORE. The Streams chains also need EVAL and XGROUP; the 8.8.0 chain needs EVAL and the bundled RedisBloom module. Redis...

Chromium: CVE-2026-16420 Type Confusion in WebAudio

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-16910

A flaw was found in Red Hat Quay's notification webhook feature. The Slack and generic webhook notification handlers accept user-supplied URLs without SSRF validation, allowing a repository administrator to make the Quay worker issue POST requests to internal network addresses or cloud...

CVE-2026-16910 Quay: ssrf in red hat quay notification webhooks (slack/generic)

A flaw was found in Red Hat Quay's notification webhook feature. The Slack and generic webhook notification handlers accept user-supplied URLs without SSRF validation, allowing a repository administrator to make the Quay worker issue POST requests to internal network addresses or cloud...

Zabbix - SQL Injection

Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggleids array parameter in latest.php and perform SQL injection attacks. id: CVE-2016-10134 info: name: Zabbix - SQL Injection author: princechaddha severity: critical description: Zabbix...

Zimbra Collaboration - Cross-Site Scripting (XSS)

An issue was discovered in Zimbra Collaboration ZCS 9.0 and 10.0. A Cross-Site Scripting XSS vulnerability exists in the CalendarInvite feature of the Zimbra webmail classic user interface, because of improper input validation in the handling of the calendar header. An attacker can exploit this v...

H3C SSL VPN <=2022-07-10 - Cross-Site Scripting

H3C SSL VPN 2022-07-10 and prior contains a cookie-based cross-site scripting vulnerability in wnm/login/login.json svpnlang. id: CVE-2022-35416 info: name: H3C SSL VPN =2022-07-10 - Cross-Site Scripting author: 0x240x23elu severity: medium description: | H3C SSL VPN 2022-07-10 and prior contains...