GHSA-3QP7-7MW8-WX86 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, wildfly, infinispan, apache-nifi...

CVE-2026-41855

In an untrusted JMS environment, org.springframework.jms.support.conve...

CVE-2026-41845

Due to incorrect escaping, the use of JavaScriptUtils.javaScriptEscape...

GHSA-2J2X-HQR9-3H42 vulnerabilities

Vulnerabilities for packages: vitess...

GHSA-C2P3-7M5P-CV8X vulnerabilities

Vulnerabilities for packages: zabbix-fips...

CVE-2026-44119

Improper Privilege Management vulnerability in Apache HTTP Server 2.4.67 and earlier allows local .htaccess authors to read files with the privileges of the httpd user. This issue affects Apache HTTP Server: from through 2.4.67. Users are recommended to upgrade to version 2.4.68, which fixes the...

ROS-20260608-73-0012

The vulnerability of the .NET software platform is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

SUSE CVE-2026-10947

Use after free in WebRTC in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2026-10995

Heap buffer overflow in TabStrip in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-11089

Uninitialized Use in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-11196

Type Confusion in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted XML file. Chromium security severity: Medium...

SUSE CVE-2026-11228

Inappropriate implementation in File Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

SUSE CVE-2026-11242

Insufficient validation of untrusted input in Plugins in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

GHSA-54Q4-CH9P-5885 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-2MPM-MP7X-8JHG vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-HPP8-75J8-PRPW vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-F56C-QCQF-CQ94 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-F2F4-MP7W-9JR4 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-WJXM-QHQX-X3P4 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-6XX9-X287-3539 vulnerabilities

Vulnerabilities for packages: chromium...