42474 matches found
CVE-2026-53600 vulnerabilities
Vulnerabilities for packages: zed...
GHSA-89XV-2M56-2M9X vulnerabilities
Vulnerabilities for packages: keep, langfuse, peerdb-ui, langfuse-fips, keep-fips, homepage, jitsucom-jitsu...
PT-2026-64379
Name of the Vulnerable Software and Affected Versions libssh2 versions prior to 1.11.1 Description A double-free issue exists in the sftp open function within src/sftp.c. This occurs when a malicious SSH server responds to SSH FXP OPEN with SSH FXP STATUS containing FX OK, causing the response da...
CVE-2026-38764
An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kernel driver pgsecdl.sys...
GHSA-R7WM-3CXJ-WFF9 vulnerabilities
Vulnerabilities for packages: apache-nifi, apache-nifi-registry, akhq, gradle, apicurio-registry, strimzi-kafka-operator, keycloak-config-cli, dependency-track, tez, apache-tika, infinispan, druid, opensearch, spark, flyway, cass-config-builder, logstash, scala, sonarqube, spdx-tools-java, trino,...
Malicious code in yuinpm (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4f439dbbb74a729ef5c43bdc62f612060dbc9e6a96b825c8305b88dd43b3172 Package [email protected] contains 3 files and produced no a static rule matches and no traced-code findings indicating exfiltration, install-time...
Malicious code in svelte-streak-metrics (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 45dbfe79dd6fb079811b798a734de0a661605d420454d97a0635dbdaec621efd The package contains no static or traced indicators of exfiltration, install-time remote code execution, silent-relay, credential distribution,...
GHSA-V56Q-MH7H-F735 vulnerabilities
Vulnerabilities for packages: vitess, nextcloud-server, argo-workflows, rancher-api-ui...
GHSA-5QHF-9PHG-95M2 vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, ruby3.4-rails, ruby4.0-rails...
CVE-2026-59880 vulnerabilities
Vulnerabilities for packages: authentik-fips, rancher-api-ui, keep, vitess, authentik, arangodb, gitlab-rails-ce, nextcloud-server, keep-fips, gitlab-rails-ce-fips, argo-workflows...
GHSA-V396-V7Q4-X2QJ vulnerabilities
Vulnerabilities for packages: checkov, mlflow...
GHSA-956X-8GVW-WG5V vulnerabilities
Vulnerabilities for packages: checkov, mlflow...
CVE-2026-16221 vulnerabilities
Vulnerabilities for packages: vitess, renovate, opensearch-dashboards, prism, argo-workflows, yaml-language-server, langfuse, tileserver-gl...
CVE-2026-52688
RRSIGs with too few labels can lead to bypass of DNSSEC wildcard validation...
USN-8594-1: Linux kernel (OEM) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Drivers core; - Null block...
CVE-2026-59678
CVE-2026-59678 : An reported Incorrect Authorization vulnerability in Linux-Gaming PortProtonQt allows any user to mount/unmount arbitrary file systems and modify network settings via NetworkManager. Affected: PortProtonQt before 0d0f0950ebd948cdf82e8c3e1ebd2bcb9b8bafbe. Impact includes local pri...
UBUNTU-CVE-2026-6390
A flaw was found in GNU nano's multi-buffer error message handling. When a user opens multiple files at startup and one triggers an ALERT-level error, a specially crafted filename containing printf format specifiers can be reinterpreted. This format string vulnerability may allow an attacker to...
SUSE CVE-2026-59901
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the Bzip2Decoder handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a malformed bzip2 stream that permanently captures the...
SUSE CVE-2026-59919
Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.136.Final and 4.2.16.Final, Netty's HAProxy encoder HAProxyMessageEncoder writes AFUNIX source and destination socket addresses into the HAProxy V1 text protocol without validating them for CRLF...
