2814 matches found
EUVD-2026-36182
ImageMagick Vulnerable to Stack Overflow in its MVG Decoder...
Linux Distros Unpatched Vulnerability : CVE-2026-53048
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gfs2: prevent NULL pointer dereference during unmount When flushing out outstanding glock work during an unmount, gfs2logflush can be called when sdp-sdjdesc ha...
Astra Linux – Vulnerability in imagemagick
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, there was a heap information disclosure vulnerability in ImageMagick’s PSD Adobe Photoshop format handler. When processing a maliciously crafted PSD file...
Astra Linux – Vulnerability in Squid
Squid is a caching proxy for the Web. Prior to version 7.5, due to improper input validation, Squid was vulnerable to out-of-bound reads when handling ICP traffic. This issue allowed a remote attacker to access small amounts of memory that might contain sensitive information, by responding with...
Zimbra Collaboration Server < 8.8.15 Patch 7 Server-Side Request Forgery Vulnerability
According to its self-reported version number, Zimbra Collaboration Server is affected by a server-side request forgery vulnerability: - Zimbra Collaboration Suite ZCS before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled. CVE-2020-7796 Note that Nessus has no...
Photon OS 4.0: Wireshark PHSA-2026-4.0-1036
An update of the wireshark package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1036. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
ROOT-OS-DEBIAN-12-CVE-2026-34475 CVE-2026-34475 in rootio-varnish - Patched by Root
Root has patched CVE-2026-34475 in the rootio-varnish package for Root:Debian:12. Multiple fixed versions available...
SUSE-SU-2026:22167-1 Security update for ldns
This update for ldns fixes the following issue - CVE-2026-10846: when ldns is used by applications for stub resolving, it does not sufficiently verify that received responses belong to a sent query bsc1267670...
ROOT-APP-GOBINARY-CVE-2026-27889 CVE-2026-27889 in rootio-github.com/nats-io/nats-server/v2 - Patched by Root
Root has patched CVE-2026-27889 in the rootio-github.com/nats-io/nats-server/v2 package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-31892 CVE-2026-31892 in rootio-github.com/argoproj/argo-workflows/v3 - Patched by Root
Root has patched CVE-2026-31892 in the rootio-github.com/argoproj/argo-workflows/v3 package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-32287 CVE-2026-32287 in rootio-github.com/antchfx/xpath - Patched by Root
Root has patched CVE-2026-32287 in the rootio-github.com/antchfx/xpath package for Root:Go. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2023-51775 CVE-2023-51775 in io.root.org.bitbucket.b_c:jose4j - Patched by Root
Root has patched CVE-2023-51775 in the io.root.org.bitbucket.bc:jose4j package for Root:Maven. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-61726 CVE-2025-61726 in rootio-golang-1.24 - Patched by Root
Root has patched CVE-2025-61726 in the rootio-golang-1.24 package for Root:Debian:13. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-24308 CVE-2026-24308 in io.root.org.apache.zookeeper:zookeeper - Patched by Root
Root has patched CVE-2026-24308 in the io.root.org.apache.zookeeper:zookeeper package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2022-46337 CVE-2022-46337 in io.root.org.apache.derby:derby - Patched by Root
Root has patched CVE-2022-46337 in the io.root.org.apache.derby:derby package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2023-26119 CVE-2023-26119 in io.root.net.sourceforge.htmlunit:htmlunit - Patched by Root
Root has patched CVE-2023-26119 in the io.root.net.sourceforge.htmlunit:htmlunit package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2020-11113 CVE-2020-11113 in io.root.com.fasterxml.jackson.core:jackson-databind - Patched by Root
Root has patched CVE-2020-11113 in the io.root.com.fasterxml.jackson.core:jackson-databind package for Root:Maven. Multiple fixed versions available...
GHSA-H3JJ-5F3V-3685 n8n: Public API Execution Retry Authorization Bypass
Impact The Public API endpoint for retrying executions authorized access using workflow:read rather than workflow:execute. An authenticated user with read-only access to a shared workflow could use the Public API to retry executions of that workflow, bypassing the intended permission boundary...
@angular/common: Denial of Service (DoS) via OOM in Date Formatting (formatDate)
A Denial of Service DoS vulnerability exists in the @angular/common package of the Angular framework. The formatDate function, which is also utilized by the standard Angular DatePipe, does not properly limit or validate the length of the format parameter. When parsing a maliciously crafted,...