481 matches found
GHSA-H2JQ-G4CQ-5PPQ vulnerabilities
Vulnerabilities for packages: pact-broker-docker-fips, pact-broker-docker, gitlab-cng, ruby3.2-rack, gitlab-rails-ce-fips, ruby3.3-rack, ruby3.4-rack, gitlab-rails-ce, kube-fluentd-operator, ruby3.2-rails, ruby3.4-rails, ruby4.0-rack, logstash...
CVE-2026-32762 vulnerabilities
Vulnerabilities for packages: pact-broker-docker-fips, pact-broker-docker, kube-fluentd-operator, ruby3.2-rails, ruby3.4-rails, logstash...
GHSA-VGPV-F759-9WX3 vulnerabilities
Vulnerabilities for packages: pact-broker-docker-fips, pact-broker-docker, gitlab-cng, ruby3.2-rack, gitlab-rails-ce-fips, ruby3.3-rack, ruby3.4-rack, gitlab-rails-ce, kube-fluentd-operator, ruby3.2-rails, ruby3.4-rails, ruby4.0-rack, logstash...
GHSA-QFGR-CRR9-7R49 vulnerabilities
Vulnerabilities for packages: pact-broker-docker-fips, pact-broker-docker, kube-fluentd-operator, ruby3.2-rails, ruby3.4-rails, logstash...
GHSA-Q2WW-5357-X388 vulnerabilities
Vulnerabilities for packages: pact-broker-docker-fips, pact-broker-docker, gitlab-cng, ruby3.2-rack, gitlab-rails-ce-fips, ruby3.3-rack, ruby3.4-rack, gitlab-rails-ce, kube-fluentd-operator, ruby3.2-rails, ruby3.4-rails, ruby4.0-rack, logstash...
PT-2026-30570
A vulnerability has been found in assafelovic gpt-researcher up to 3.4.3. This affects the function extract command data of the file backend/server/server utils.py of the component ws Endpoint. Such manipulation of the argument args leads to code injection. The attack may be performed from remote...
Linux Distros Unpatched Vulnerability : CVE-2026-34544
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version...
SUSE CVE-2026-34543
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version 3.4.0 to before version 3.4.8, sensitive information from heap memory may be leaked through the decoded pixel data information disclosure...
CVE-2026-34543
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version 3.4.0 to before version 3.4.8, sensitive information from heap memory may be leaked through the decoded pixel data information disclosure...
CVE-2026-34544
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version 3.4.0 to before version 3.4.8, a crafted B44 or B44A EXR file can cause an out-of-bounds write in any application that decodes it via...
UBUNTU-CVE-2026-34544
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version 3.4.0 to before version 3.4.8, a crafted B44 or B44A EXR file can cause an out-of-bounds write in any application that decodes it via...
CVE-2026-34543
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version 3.4.0 to before version 3.4.8, sensitive information from heap memory may be leaked through the decoded pixel data information disclosure...
CVE-2026-34544
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version 3.4.0 to before version 3.4.8, a crafted B44 or B44A EXR file can cause an out-of-bounds write in any application that decodes it via...
CVE-2026-34545
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From version 3.4.0 to before version 3.4.7, an attacker providing a crafted .exr file with HTJ2K compression and a channel width of 32768 can write...
CVE-2026-34537
iccDEV provides a set of libraries and tools for working with ICC color management profiles. Prior to version 2.3.1.6, a crafted ICC profile can trigger Undefined Behavior UB in CIccOpDefEnvVar::Exec due to invalid enum values being loaded for icSigCmmEnvVar. The issue is observable under UBSan a...
CVE-2026-33026 nginx-ui Backup Restore Allows Tampering with Encrypted Backups
Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui backup restore mechanism allows attackers to tamper with encrypted backup archives and inject malicious configuration during restoration. This issue has been patched in version 2.3.4...
CVE-2026-33027 Nginx UI: Improper Path Validation Allows Recursive Deletion of the Nginx Configuration Directory
Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui configuration improperly handles URL-encoded traversal sequences. When specially crafted paths are supplied, the backend resolves them to the base Nginx configuration directory and executes the operati...
CVE-2026-33028 Nginx UI: Race Condition Leads to Persistent Data Corruption and Service Collapse
Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui application is vulnerable to a Race Condition. Due to the complete absence of synchronization mechanisms Mutex and non-atomic file writes, concurrent requests lead to the severe corruption of the prima...
CVE-2026-33029
CVE-2026-33029 affects Nginx UI (web UI for Nginx). An input validation flaw in the logrotate configuration allows an authenticated user to submit a negative integer for the rotation interval, causing the backend to enter an infinite loop or invalid state and rendering the UI unresponsive (DoS). ...
