CVE-2026-46673 vulnerabilities

Vulnerabilities for packages: yazi...

CVE-2026-41075

RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.0 through 5.0.9 and 6.0.0 through 6.0.2 contain an SQL injection vulnerability. An authenticated user can craft input that is incorporated into database queries without proper validation, potentially allowing th...

GHSA-FW88-PF9M-P947 vulnerabilities

Vulnerabilities for packages: wildfly...

GHSA-C3QV-MH67-FPXW vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-3X3V-W654-M28M vulnerabilities

Vulnerabilities for packages: wildfly...

SUSE CVE-2026-44056

A stack-based buffer overflow in desktop.c in Netatalk 1.3 through 4.2.2 allows a remote authenticated attacker to cause a denial of service, obtain limited information, or modify limited data...

CVE-2026-44074

Netatalk 2.1.0 through 4.4.2 combines multiple errno values using bitwise OR, resulting in incorrect error codes when multiple error conditions occur simultaneously, which may allow a remote attacker to cause a minor service disruption via conditions that trigger incorrect error-handling paths...

CVE-2026-44063

An LDAP injection vulnerability in Netatalk 2.1.0 through 4.4.2 allows a remote authenticated attacker to manipulate LDAP queries and obtain limited information or modify LDAP entries via crafted filter input...

CVE-2026-7835

A format string argument mismatch in Netatalk 3.0.3 through 4.4.2 allows a remote authenticated attacker to cause a minor denial of service via crafted input that triggers incorrect format string processing...

CVE-2026-44075

A missing break statement in DSI OpenSession processing in Netatalk 1.5.0 through 4.4.2 causes a DSIOPTATTNQUANT switch case to fall through into DSIOPTSERVQUANT, resulting in unintended session option handling that may allow a remote attacker to cause a minor service disruption via crafted DSI...

GHSA-22W3-693W-X895 vulnerabilities

Vulnerabilities for packages: komodo...

GHSA-X86F-5XW2-FM2R vulnerabilities

Vulnerabilities for packages: rancher-machine, undock, amazon-cloudwatch-agent-operator, podman, grafana, nuclei, kpt, datadog-agent, ko, docker-credential-gcr, kots, rancher, trivy-operator, zot, opentelemetry-operator, cri-tools, skopeo, buildah, nerdctl, portieris, spire-server, k8sgpt,...

GHSA-3QPQ-R242-JQJ7 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-M6XR-FVFG-5G64 vulnerabilities

Vulnerabilities for packages: vale...

CVE-2026-46377 vulnerabilities

Vulnerabilities for packages: vale...

CVE-2026-6722 vulnerabilities

Vulnerabilities for packages: php...

CVE-2026-6665 vulnerabilities

Vulnerabilities for packages: pgbouncer...

CVE-2026-7568 vulnerabilities

Vulnerabilities for packages: php...

CVE-2026-5950

An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling, enabling a remote unauthenticated attacker to cause severe resource exhaustion by sending queries that trigger specific retry conditions. This issue affects BIND 9 versions 9.18.36 throu...

CVE-2026-3039

BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption when receiving and processing maliciously-constructed packets. Typically these servers will be found in Active Directory integrated DNS deployments and/or...