GHSA-PM4M-PH32-GHV5 vulnerabilities

Vulnerabilities for packages: authentik-fips, renovate, kubeflow-pipelines...

GHSA-C2RV-HWQM-WJPG vulnerabilities

Vulnerabilities for packages: opensearch...

GHSA-9M94-W2VQ-HCF9 vulnerabilities

Vulnerabilities for packages: docker-machine-driver-harvester...

GHSA-7P3P-8QV8-M2VH vulnerabilities

Vulnerabilities for packages: apache-tika, druid, neo4j, dependency-track, akhq, solr, confluent-kafka, strimzi-kafka-operator...

GHSA-2FVJ-HGJ9-J2GR vulnerabilities

Vulnerabilities for packages: apache-tika, druid, neo4j, dependency-track, akhq, tez, solr, confluent-kafka...

GHSA-F4V5-65JJ-PCR2 vulnerabilities

Vulnerabilities for packages: druid, neo4j, dependency-track, akhq, solr, confluent-kafka, strimzi-kafka-operator...

GHSA-MFG7-5GFP-C4W3 vulnerabilities

Vulnerabilities for packages: thingsboard, keycloak, druid, apache-pulsar, apicurio-registry, akhq, apache-nifi, opensearch, management-api-for-apache-cassandra-5.0, tez, spark, strimzi-kafka-operator, zipkin, celeborn...

DEBIAN-CVE-2024-14041

In Bouncy Castle for Java from 1.73 to before 1.78, three ML-KEM CRYSTALS-Kyber routines divided secret-derived polynomial coefficients by the modulus q: Poly.toMsg, which decodes the decrypted message, and the ciphertext compression routines Poly.compressPoly and PolyVec.compressPolyVec. An...

USN-8620-1: Linux kernel vulnerabilities

Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...

USN-8619-1: Linux kernel (HWE) vulnerabilities

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. CVE-2025-54505 It was discovered that some AMD Zen 2 processors did not properly isolate shared...

USN-8570-2: Linux kernel (Oracle) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Drivers core; - Null block...

USN-8618-1 linux-aws, linux-raspi vulnerabilities

It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. CVE-2025-54518 Several security issues...

USN-8617-1 linux-kvm vulnerabilities

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-43503 Several security issues...

USN-8616-1 linux-ibm, linux-ibm-5.4 vulnerabilities

It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker...

USN-8547-2 linux-azure-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - RISC-V architecture; - Cryptographic API; - InfiniBand drivers; - IOMMU subsystem; - Network drivers; -...

BELL-CVE-2026-64433

Bulletin has no description...

BELL-CVE-2026-64362

Bulletin has no description...

CVE-2026-64783

creationtimestamp| type| source ---|---|--- 2026-07-28 05:15:25+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 08:45:03+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1984 2026-07-28 13:18:43+00:00| seen|...

CVE-2026-64775

creationtimestamp| type| source ---|---|--- 2026-07-28 05:15:20+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 16:52:14+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-15 2026-07-28 18:00:06+00:00|...

CVE-2026-64774

creationtimestamp| type| source ---|---|--- 2026-07-28 05:15:18+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 08:45:08+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1984 2026-07-28 16:52:16+00:00| seen|...