CVE-2026-6919 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-6921 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-6919 vulnerabilities

Vulnerabilities for packages: chromium...

gdb: Fix of CVE-2019-1010180

CVE-2019-1010180: add warning for corrupt ELF section size larger than file...

GHSA-FH64-R2VC-XVHR vulnerabilities

Vulnerabilities for packages: mlflow...

CVE-2026-6752 vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

GHSA-H3RR-2Q6V-G8RC vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

CVE-2026-6757 vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

CVE-2026-6764 vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

GHSA-5MFF-CXQ5-82JV vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

CVE-2026-6759 vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

CVE-2026-7111

Text::CSVXS versions before 1.62 for Perl have a use-after-free when registered callbacks extend the Perl argument stack, which may enable type confusion or memory corruption. The Parse, print, getline, and getlineall methods invoke registered callbacks for example afterparse, beforeprint, or...

Linux Distros Unpatched Vulnerability : CVE-2026-7353

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap buffer overflow in Skia in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform ...

Linux Distros Unpatched Vulnerability : CVE-2026-40970

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When configured to use an SSL bundle, Spring Boot's Elasticsearch auto-configuration does not perform hostname verification when connecting to the Elasticsearch...

CVE-2026-42198

pgjdbc is an open source postgresql JDBC Driver. From version 42.2.0 to before version 42.7.11, pgjdbc is vulnerable to a client-side denial of service during SCRAM-SHA-256 authentication. A malicious server can instruct the driver to perform SCRAM authentication with a very large iteration count...

CVE-2026-40194 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-MJW2-V2HM-WJ34 vulnerabilities

Vulnerabilities for packages: dagster-fips, dagster...

oxenstored keeps quota related use counts across domain destruction

ISSUE DESCRIPTION When oxenstored is tearing a domain down, the node data is cleaned up but the usage counts are leaked. When the domain ID is eventually reused, the new domain can create fewer nodes before beeing deemed to be over quota. IMPACT Over an extended period of time, new domains will b...

CVE-2024-54011

Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handle data supplied in certain requests, causing a service disruption. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and...

NSA GRASSMARLIN

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to disclose sensitive information. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for all control...