18717 matches found
AZL-83136 CVE-2026-34271 affecting package mysql for versions less than 8.0.46-1
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...
AZL-83130 CVE-2026-34270 affecting package mysql for versions less than 8.0.46-1
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...
AZL-83148 CVE-2026-34267 affecting package mysql for versions less than 8.0.46-1
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.45. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks...
AZL-83178 CVE-2026-22015 affecting package mysql for versions less than 8.0.46-1
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Information Schema. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...
AZL-83142 CVE-2026-22017 affecting package mysql for versions less than 8.0.46-1
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQ...
AZL-83127 CVE-2026-22009 affecting package mysql for versions less than 8.0.46-1
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQ...
AZL-83169 CVE-2026-22005 affecting package mysql for versions less than 8.0.46-1
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MyS...
AZL-83163 CVE-2026-22001 affecting package mysql for versions less than 8.0.46-1
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Information Schema. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...
AZL-83166 CVE-2026-22004 affecting package mysql for versions less than 8.0.46-1
Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...
AZL-83139 CVE-2026-22002 affecting package mysql for versions less than 8.0.46-1
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MyS...
AZL-83121 CVE-2026-21998 affecting package mysql for versions less than 8.0.46-1
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MyS...
AZL-84065 CVE-2026-32147 affecting package erlang for versions less than 26.2.5.20-1
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Erlang OTP ssh sshsftpd module allows an authenticated SFTP user to modify file attributes outside the configured chroot directory. The SFTP daemon sshsftpd stores the raw, user-supplied path in file...
AZL-56723 CVE-2024-12797 for package cloud-hypervisor-cvm is not applicable
This CVE either no longer is or was never applicable...
AZL-9785 CVE-2009-1890 for package httpd is not applicable
This CVE either no longer is or was never applicable...
AZL-9800 CVE-2022-31621 for package mariadb is not applicable
This CVE either no longer is or was never applicable...
AZL-9802 CVE-2022-31623 for package mariadb is not applicable
This CVE either no longer is or was never applicable...
AZL-9801 CVE-2022-31622 for package mariadb is not applicable
This CVE either no longer is or was never applicable...
AZL-9803 CVE-2022-31624 for package mariadb is not applicable
This CVE either no longer is or was never applicable...
AZL-9415 CVE-2022-27452 for package mariadb is not applicable
This CVE either no longer is or was never applicable...
AZL-9410 CVE-2022-27446 for package mariadb is not applicable
This CVE either no longer is or was never applicable...
AZL-9408 CVE-2022-27444 for package mariadb is not applicable
This CVE either no longer is or was never applicable...
AZL-9340 CVE-2022-24801 for package python-twisted is not applicable
This CVE either no longer is or was never applicable...
AZL-9358 CVE-2022-27382 for package mariadb is not applicable
This CVE either no longer is or was never applicable...
AZL-9359 CVE-2022-27385 for package mariadb is not applicable
This CVE either no longer is or was never applicable...
AZL-9179 CVE-2018-9057 for package terraform is not applicable
This CVE either no longer is or was never applicable...
AZL-9219 CVE-2019-1010238 for package pango is not applicable
This CVE either no longer is or was never applicable...
AZL-28619 CVE-2023-4273 for package hyperv-daemons is not applicable
This CVE either no longer is or was never applicable...
AZL-26947 CVE-2023-33199 for package skopeo is not applicable
This CVE either no longer is or was never applicable...
AZL-13703 CVE-2023-23920 for package nodejs is not applicable
This CVE either no longer is or was never applicable...
AZL-10315 CVE-2022-31144 for package redis is not applicable
This CVE either no longer is or was never applicable...
AZL-83087 CVE-2026-5928 affecting package glibc 2.38-21
Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and multi-byte character encodings, in the GNU C Library version 2.43 or earlier, may result in an attempt to read bytes before an allocated buffer, potentially...
AZL-83093 CVE-2026-5450 affecting package glibc 2.38-21
Calling the scanf family of functions with a %mc malloc'd character match in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow...
AZL-83184 CVE-2026-3219 affecting package python-pip for versions less than 24.2-8
pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result in confusing installation behavior, such as installing "incorrect" files according to the filename of the archive. New behavior only proceeds wit...
AZL-83432 CVE-2026-3219 affecting package python-virtualenv for versions less than 20.36.1-4
pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result in confusing installation behavior, such as installing "incorrect" files according to the filename of the archive. New behavior only proceeds wit...
AZL-83102 CVE-2026-5958 affecting package sed for versions less than 4.9-2
When sed is invoked with both -i in-place edit and --follow-symlinks, the function opennextfile performs two separate, non-atomic filesystem operations on the same path: 1. resolves symlink to its target and stores the resolved path for determining when output is written, 2. opens the original...
AZL-83096 CVE-2026-31430 affecting package kernel for versions less than 6.6.137.1-1
In the Linux kernel, the following vulnerability has been resolved: X.509: Fix out-of-bounds access when parsing extensions Leo reports an out-of-bounds access when parsing a certificate with empty Basic Constraints or Key Usage extension because the first byte of the extension is read before...
AZL-83081 CVE-2026-41254 affecting package lcms2 for versions less than 2.15-2
Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication...
AZL-83075 CVE-2026-41254 affecting package openjpeg2 2.3.1-12
Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the multiplication...
AZL-83015 CVE-2026-40341 affecting package libgphoto2 2.5.31-1
libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, an out of bound read in ptpunpackEOSFocusInfoEx could be used to crash libgphoto2 when processing input from untrusted USB devices. Commit c385b34af260595dfbb5f9329526be5158985987 contains a patch. No known...
AZL-83030 CVE-2026-40340 affecting package libgphoto2 2.5.31-1
libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 have an out-of-bounds read vulnerability in ptpunpackOI in camlibs/ptp2/ptp-pack.c lines 530–563. The function validates len PTPoiSequenceNumber i.e., len 48 but subsequently accesses offsets 48–56, up to 9 byt...
AZL-83012 CVE-2026-40334 affecting package libgphoto2 2.5.31-1
libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, a missing null terminator exists in ptpunpackCanonFE in camlibs/ptp2/ptp-pack.c line 1377. The function copies a filename into a 13-byte buffer using strncpy without explicitly null-terminating the result. ...
AZL-83018 CVE-2026-40335 affecting package libgphoto2 2.5.31-1
libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 have an out-of-bounds read in ptpunpackDPV in camlibs/ptp2/ptp-pack.c lines 622–629. The UINT128 and INT128 cases advance offset += 16 without verifying that 16 bytes remain in the buffer. The entry check at li...
AZL-83009 CVE-2026-40336 affecting package libgphoto2 2.5.31-1
libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 have a memory leak in ptpunpackSonyDPD in camlibs/ptp2/ptp-pack.c lines 884–885. When processing a secondary enumeration list introduced in 2024+ Sony cameras, the function overwrites dpd-FORM.Enum.SupportedVal...
AZL-83024 CVE-2026-40339 affecting package libgphoto2 2.5.31-1
libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 have an out-of-bounds read in ptpunpackSonyDPD in camlibs/ptp2/ptp-pack.c line 842. The function reads the FormFlag byte via dtoh8odata, poffset without a prior bounds check. The standard ptpunpackDPD at lines...
AZL-83027 CVE-2026-40338 affecting package libgphoto2 2.5.31-1
libgphoto2 is a camera access and control library. Versions up to and including 2.5.33 have an out-of-bounds read in the PTPDPFFEnumeration case of ptpunpackSonyDPD in camlibs/ptp2/ptp-pack.c line 856. The function reads a 2-byte enumeration count N via dtoh16odata, poffset without verifying that...
AZL-83021 CVE-2026-40333 affecting package libgphoto2 2.5.31-1
libgphoto2 is a camera access and control library. In versions up to and including 2.5.33, two functions in camlibs/ptp2/ptp-pack.c accept a data pointer but no length parameter, performing unbounded reads. Their callers in ptpunpackEOSevents have xsize available but never pass it, leaving both...
AZL-82982 CVE-2026-40253 affecting package opencryptoki 3.24.0-3
openCryptoki is a PKCS11 library and provides tooling for Linux and AIX. In versions 3.26.0 and below, the BER/DER decoding functions in the shared common library asn1.c accept a raw pointer but no buffer length parameter, and trust attacker-controlled BER length fields without validating them...
AZL-85682 CVE-2026-35469 affecting package kubernetes for versions less than 1.30.10-23
spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and lengths before allocating memory. Three allocation paths are affected: the SETTINGS frame entry count, the header count ...
AZL-85685 CVE-2026-35469 affecting package kubevirt for versions less than 1.7.1-7
spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and lengths before allocating memory. Three allocation paths are affected: the SETTINGS frame entry count, the header count ...
AZL-85625 CVE-2026-35469 affecting package cert-manager for versions less than 1.12.15-9
spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and lengths before allocating memory. Three allocation paths are affected: the SETTINGS frame entry count, the header count ...