141943 matches found
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound in the JNX decoder. An attacker can cause a heap buffer over-write by processing extremely large files on 32-bit builds. Remediation A fix was pushed into the master branch but not yet published. Reference...
CVE-2026-64228
In the Linux kernel, the following vulnerability has been resolved: net: ethtool: phy: avoid NULL deref when PHY driver is unbound phydev-drv can become NULL while the phydevice is still attached to its netdevice, namely after the PHY driver is unbound via sysfs: echo...
GHSA-V3J6-27VC-7PW2 ImageMagick: Policy Bypass in APNG encoder and delegates due to a missing check
Due to a missing check in the APNG encoder and external delegates it is possibly to bypass the policy and write to a disallowed path...
Improper Encoding or Escaping of Output
Overview Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output through the HTML encoding. An attacker can execute arbitrary code by supplying specially crafted input that is not properly sanitized. Remediation A fix was pushed into the master branch but not y...
React Router: Unauthenticated Denial of Service via Inefficient Route Matching
This is a follow up to https://github.com/remix-run/react-router/security/advisories/GHSA-8x6r-g9mw-2r78 that covers additional reported scenarios in which the manifest endpoint could be accessed via unauthenticated targeted requests that would put heavy load on the server and slow down response...
RHSA-2026:44694 Red Hat Security Advisory: kernel security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:44522 Red Hat Security Advisory: kernel security update
Bulletin has no description...
RHSA-2026:44438 Red Hat Security Advisory: compat-openssl11 security update
Bulletin has no description...
RHSA-2026:44480 Red Hat Security Advisory: compat-openssl10 security update
Bulletin has no description...
PYSEC-2026-3447
creationtimestamp| type| source ---|---|--- 2026-07-24 09:40:25+00:00| seen| https://gist.github.com/sw1pp3r/00f32e3393b6c6123cc7aeaff3ed9f18...
GHSA-4MP9-239F-G9HG vulnerabilities
Vulnerabilities for packages: thingsboard, wazuh-indexer, floci, knative-kafka-broker, airbyte-server, apache-hop, elasticsearch-fips, apache-hop-fips, request-9047-keycloak-fips, spark, knative-kafka-broker-fips, apicurio-registry-fips, management-api-for-apache-cassandra-5.0, apache-nifi,...
GHSA-6CQP-G7GG-8HR5 vulnerabilities
Vulnerabilities for packages: thingsboard, wazuh-indexer, floci, knative-kafka-broker, airbyte-server, apache-hop, elasticsearch-fips, apache-hop-fips, request-9047-keycloak-fips, spark, knative-kafka-broker-fips, apicurio-registry-fips, management-api-for-apache-cassandra-5.0, apache-nifi,...
GHSA-Q4F6-JM68-57WW vulnerabilities
Vulnerabilities for packages: thingsboard, wazuh-indexer, floci, knative-kafka-broker, airbyte-server, apache-hop, elasticsearch-fips, apache-hop-fips, request-9047-keycloak-fips, spark, knative-kafka-broker-fips, apicurio-registry-fips, management-api-for-apache-cassandra-5.0, apache-nifi,...
GHSA-WC96-39FC-566F vulnerabilities
Vulnerabilities for packages: thingsboard, management-api-for-apache-cassandra-5.0, tez, cassandra...
GHSA-G7HG-VRCF-MVMR vulnerabilities
Vulnerabilities for packages: thingsboard, management-api-for-apache-cassandra-5.0, tez, cassandra...
CVE-2026-13077
creationtimestamp| type| source ---|---|--- 2026-07-24 04:46:03+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...
CVE-2026-66141
Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...
CVE-2026-66140
Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-name are mishandled...