CVE-2025-13462 vulnerabilities

Vulnerabilities for packages: python...

GHSA-68M9-983M-F3V5 vulnerabilities

Vulnerabilities for packages: grafana, openfga...

poppler: Use-After-Free in StructTreeRoot class

A use-after-free vulnerability has been identified in Poppler’s StructTreeRoot class when processing specially crafted PDF documents. An attacker could exploit this flaw by persuading a user to open a malicious PDF file, or by placing such a file on a share that is later previewed, causing the...

CVE-2026-4482

The installer certificate files in the …/bootstrap/common/ssl folder do not seem to have restricted permissions on Windows systems users have read and execute access. For the client.key file in particular, this could potentially lead to exploits, as this exposes agent identity material to any...

CVE-2026-4482 Insight Agent Private Key Information Disclosure via Inherited File Permissions

The installer certificate files in the …/bootstrap/common/ssl folder do not seem to have restricted permissions on Windows systems users have read and execute access. For the client.key file in particular, this could potentially lead to exploits, as this exposes agent identity material to any...

CVE-2026-33551

An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0. Restricted application credentials can create EC2 credentials. By using a restricted application credential to call the EC2 credential creation API, an authenticated user with only a reader role...

CVE-2025-55672 vulnerabilities

Vulnerabilities for packages: superset...

GHSA-4W7W-66W2-5VF9 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, langfuse-fips, langfuse, vite, vitess, gitlab-rails-ce-fips...

GHSA-P9FF-H696-F583 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, langfuse-fips, langfuse, vite, vitess, gitlab-rails-ce-fips...

CVE-2025-55674 vulnerabilities

Vulnerabilities for packages: superset...

CVE-2026-39365 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, langfuse-fips, langfuse, vite, vitess, gitlab-rails-ce-fips...

GHSA-9QPV-486P-2V4H vulnerabilities

Vulnerabilities for packages: python...

CVE-2025-13462 vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-0545 vulnerabilities

Vulnerabilities for packages: mlflow, mlflow-fips...

CVE-2025-11538 vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips...

CVE-2022-41404 vulnerabilities

Vulnerabilities for packages: druid...

Linux Distros Unpatched Vulnerability : CVE-2026-5447

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap buffer overflow in CertFromX509 via AuthorityKeyIdentifier size confusion. A heap buffer overflow occurs when converting an X.509 certificate internally du...

CVE-2026-39304

Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ. ActiveMQ NIO SSL transports do not correctly handle TLSv1.3 handshake KeyUpdates triggered by clients. This makes it possible for a client to rapidly trigger updates which causes...

USN-8162-1: Linux kernel (NVIDIA Tegra) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Cryptographic API; - Drivers core; - Bluetooth drivers; - DMA engine...

Important: Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage

A Subscription Management tool for finding and reporting Red Hat product usage Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their...