42119 matches found
CVE-2026-49214 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
GHSA-34XG-WGJX-8XPH vulnerabilities
Vulnerabilities for packages: nextcloud-server...
CVE-2026-12151 vulnerabilities
Vulnerabilities for packages: node-gyp, saf, vitess, prism, code-server, npm, renovate...
CVE-2026-6733 vulnerabilities
Vulnerabilities for packages: node-gyp, saf, vitess, prism, code-server, npm, renovate...
CVE-2026-9679 vulnerabilities
Vulnerabilities for packages: node-gyp, saf, vitess, prism, code-server, npm, renovate...
GHSA-VXPW-J846-P89Q vulnerabilities
Vulnerabilities for packages: node-gyp, saf, vitess, prism, code-server, npm, renovate...
Security Bulletin: Multiple vulnerabilities affect IBM® SDK, Java™ Technology Edition for Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint
Summary IBM SDK, Java Technology Edition Quarterly CPU - Apr 2026 - Includes Oracle April 2026 CPU Critical Patch Update CVE-2026-22016, CVE-2026-22021, CVE-2026-22013, CVE-2026-22018, CVE-2026-34268, CVE-2026-22007 Vulnerability Details CVEID:CVE-2026-22016 DESCRIPTION: Easily exploitable...
Linux Distros Unpatched Vulnerability : CVE-2026-50269
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.0, attacker- controlled input included into multipart/payload...
CVE-2026-54604
Unknown description...
Important: ImageMagick
Issue Overview: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-49 and 7.1.2-24, an infinite loop in the subimage-search operation can happen when using a crafted image. This issue has been patched in versions 6.9.13-49 and...
Linux Distros Unpatched Vulnerability : CVE-2026-12805
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in OFFIS DCMTK up to 3.7.0. The affected element is the function XMLNode::parseFile in the library ofstd/libsrc/ofxml.cc. Executing a...
CVE-2026-56410
xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId...
CVE-2026-56409
xmlwf in libexpat before 2.8.2 has an integer overflow for the output filename when -d outputDir is used...
CVE-2026-54904 vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-rails, ruby4.0-fluentd-kubernetes-daemonset, kube-logging-operator, ruby3.2-rails, ruby3.2-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset...
GHSA-5V8H-3H3Q-446P vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, ruby3.4-rails, kube-logging-operator, logstash...
Linux Distros Unpatched Vulnerability : CVE-2026-56408
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libexpat before 2.8.2 has an integer overflow in copyString. CVE-2026-56408 Note that Nessus relies on the presence of the package as reported by the vendor...
SUSE CVE-2026-48930
A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silent authority rebinding due to c-string truncation in resolver bindings. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...
SUSE CVE-2026-48933
A flaw in Node.js WebCrypto implementation can crash the process if the input of subtle.encrypt is a multiple of 2GiB. This vulnerability affects all supported release lines: Node.js 22, Node.js 24, and Node.js 26...
SUSE CVE-2026-54278
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, during cleanup it is possible for a compressed request body to be decompressed into memory in one chunk. An attacker may be able to send a compressed payload in specific situations that could be...