GHSA-P9FF-H696-F583 vulnerabilities

Vulnerabilities for packages: vitess, gitlab-rails-ce-fips, gitlab-rails-ce, langfuse-fips, vite, langfuse...

CVE-2025-55674 vulnerabilities

Vulnerabilities for packages: superset...

CVE-2026-39365 vulnerabilities

Vulnerabilities for packages: vitess, gitlab-rails-ce-fips, gitlab-rails-ce, langfuse-fips, vite, langfuse...

CVE-2025-13462 vulnerabilities

Vulnerabilities for packages: python...

GHSA-9QPV-486P-2V4H vulnerabilities

Vulnerabilities for packages: python...

CVE-2026-0545 vulnerabilities

Vulnerabilities for packages: mlflow-fips, mlflow...

CVE-2025-11538 vulnerabilities

Vulnerabilities for packages: keycloak, keycloak-fips...

CVE-2022-41404 vulnerabilities

Vulnerabilities for packages: druid...

The vulnerability of the Navigation API component in iOS, iPadOS, and MacOS operating systems allows attackers to bypass existing security mechanisms.

The vulnerability of the Navigation API component in iOS, iPadOS, and MacOS operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to bypass existing security mechanisms remotely...

Linux Distros Unpatched Vulnerability : CVE-2026-5447

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap buffer overflow in CertFromX509 via AuthorityKeyIdentifier size confusion. A heap buffer overflow occurs when converting an X.509 certificate internally du...

CVE-2026-39304

Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ. ActiveMQ NIO SSL transports do not correctly handle TLSv1.3 handshake KeyUpdates triggered by clients. This makes it possible for a client to rapidly trigger updates which causes...

USN-8162-1: Linux kernel (NVIDIA Tegra) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Block layer subsystem; - Cryptographic API; - Drivers core; - Bluetooth drivers; - DMA engine...

Important: Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage

A Subscription Management tool for finding and reporting Red Hat product usage Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their...

CVE-2026-5442

A heap buffer overflow vulnerability exists in the DICOM image decoder. Dimension fields are encoded using Value Representation VR Unsigned Long UL, instead of the expected VR Unsigned Short US, which allows extremely large dimensions to be processed. This causes an integer overflow during frame...

CVE-2026-5443

A heap buffer overflow vulnerability exists during the decoding of PALETTE COLOR DICOM images. Pixel length validation uses 32-bit multiplication for width and height calculations. If these values overflow, the validation check incorrectly succeeds, allowing the decoder to read and write to memor...

GHSA-GV3V-2CPP-3PMQ vulnerabilities

Vulnerabilities for packages: keycloak...

ruby: WEBrick CGI source disclosure

Directory traversal vulnerability in WEBrick in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2, when using NTFS or FAT filesystems, allows remote attackers to read arbitrary CGI files via a trailing 1 + plus, 2 %2b encode...

GPL Odorizers GPL750

RISK EVALUATION Successful exploitation of this vulnerability could allow a low privileged remote attacker to manipulate register values, which would result in too much or too little odorant being injected into a gas line. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to...

CVE-2025-70952 vulnerabilities

Vulnerabilities for packages: nextflow...

Linux Distros Unpatched Vulnerability : CVE-2026-5881

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Policy bypass in LocalNetworkAccess in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...