76044 matches found
CVE-2026-75803
AEAD Forgeries with Empty Ciphertext When Using EVPCipher...
CVE-2026-28947
...
CVE-2026-28984
...
CVE-2026-75595
Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and 4.2.17.Final, io.netty.handler.ssl.SslClientHelloHandlerdecode checks the wrong offset before reading the four-byte TLS handshake header, so a ClientHello whose handshake header spans records can cause...
CVE-2026-64846
Nix is a package manager for Linux and other Unix systems. Prior to 2...
CVE-2026-28953
...
CVE-2026-18307
GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution...
CVE-2026-18301
GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerabi...
CVE-2026-43745
...
CVE-2026-43720
...
CVE-2026-63384
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a...
CVE-2026-63381
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a...
CVE-2026-43731
...
CVE-2026-76888
RDP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-68552
Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, an unauthenticated remote client can send a STUN message over TCP or TLS with a body-length field from 65520 through 65532, causing the uint16t len variable in stungetmessagelenstr in src/client/nsturnmsg.c to...
CVE-2026-76922
Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-63387
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a...
CVE-2026-63388
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a...
CVE-2025-30156
Unknown description...
CVE-2026-73197
A flaw was found in FreeIPA. A remote, unauthenticated attacker can ex...
CVE-2026-77014
A flaw was found in libsoup's SoupServer HTTP Range header processing. The sortranges comparator in soup-message-headers.c truncates a 64-bit subtraction result to 32-bit int, flipping the sign for range offsets differing by more than INTMAX. This causes silent omission of requested byte ranges...
CVE-2026-76887
Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-76884
ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-18917
A flaw was found in libvirt. An unprivileged local user could exploit...
CVE-2026-64783
...
CVE-2026-73259
Mongoose is an embedded web server and network library. Prior to 7.22,...
CVE-2026-76891
Crash in sharkd in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-76881
CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-76918
SSH protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-73255
Mongoose is an embedded web server and network library. Prior to 7.22,...
CVE-2026-75596
Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, the default io.netty.handler.ssl.SniHandler constructors use the pre-handshake ClientHello aggregation path in handler/src/main/java/io/netty/handler/ssl/SslClientHelloHandler.java at...
CVE-2026-18304
GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerabi...
CVE-2026-77506
ZSA-2026-12...
CVE-2026-77587
security update...
CVE-2026-28958
...
CVE-2026-11861
A flaw was found in FreeIPA. When a trust relationship is configured b...
CVE-2026-18309
GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerab...
CVE-2026-76878
In OpenStack Aodh before 22.0.1, the alarm list API bypasses project scoping when the allprojects query parameter is set to false. The API checks for the presence of the allprojects key rather than its value; a true value enforces the administrator-only policy, but a false value removes the key a...
CVE-2026-49825
lxml is a library for processing XML and HTML in the Python language...
CVE-2026-76882
Bluetooth Attribute Protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-68553
Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.13.0, an authenticated TURN user can place printf-style format specifiers in the STUN USERNAME or REALM attribute, which passes issecurestring validation and is embedded into Redis keys at nine call sites in...
CVE-2026-64713
...
CVE-2026-28946
...
CVE-2026-18300
GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerabi...
CVE-2026-43734
...
CVE-2026-43716
...
CVE-2026-63385
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a...
CVE-2026-54330
Unknown description...