84392 matches found
CVE-2026-112940
filelock is a platform-independent file lock for Python. From 3.20.4 u...
CVE-2026-87255
Vulnerability in Oracle Java SE component: Compiler. Supported vers...
CVE-2026-111750
AIOHTTP is an asynchronous HTTP client/server framework for asyncio an...
CVE-2026-101786
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MyS...
CVE-2026-113052
security update...
CVE-2026-111943
On most platforms, Go uses the given system root certificates. However...
CVE-2026-90797
An unlimited gzip decompression routine in chttpd in Apache CouchDB 3...
CVE-2026-101725
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MyS...
CVE-2026-113681
OpenImageIO before 3.0.20.0, 3.1.x before 3.1.15.0, and 3.2.x before 3...
CVE-2026-85231
A flaw was found in libtirpc. An authenticated remote attacker could e...
CVE-2026-91373
Vulnerability in Oracle Java SE component: JSSE. Supported versions...
CVE-2026-91464
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle Gr...
CVE-2026-112936
filelock is a platform-independent file lock for Python. From 3.20.4 u...
CVE-2026-111497
A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially...
CVE-2023-7356
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Copy BASE if service data matches EIRBAASERVICEUUID Copy the content of a Periodic Advertisement Report to BASE only if the service UUID is Basic Audio Announcement Service UUID...
CVE-2026-93336
Missing authorization in the unit resources download route in Canonical Juju 4.0 through 4.0.15 allows a controller-authenticated principal a unit agent, or a user with only login permission to read any application's charm resource in any model, including container-registry credentials, via a...
CVE-2026-90439
NGINX Plus and NGINX Open Source have a vulnerability in the ngxhttpv3module module. When using HTTP/3 with OpenSSL versions = OpenSSL 3.5.0 under certain configurations, a limited heap buffer overflow could happen while processing a TLS handshake. This can happen in a non-deterministic manner th...
CVE-2026-85731
oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, co...
CVE-2026-85732
oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, th...
CVE-2026-81665
A heap-based buffer overflow was found in Corosyncs Totem Process Gro...
CVE-2026-98869
In the Linux kernel, the following vulnerability has been resolved: bpf: Infer zextdst based on static register liveness analysis As reported in the thread 1, the verifier's 32-bit operations zero extension logic is broken. This logic is responsible for correct semantics of 32-bit operations on...
CVE-2026-92597
Nodemailer versions = 6.9.16 and 9.1.0 mis-parse RFC 5322 comments...
CVE-2026-86472
fast-uri is a dependency-free RFC 3986 URI parser for Node.js, used by...
CVE-2026-92595
Nodemailer npm package nodemailer versions 9.1.0 and earlier do no...
CVE-2026-91786
A flaw was found in GNOME Shell. When processing icons from a remote search provider via D-Bus, the system fails to validate the icon's declared dimensions against the actual data buffer size. A malicious or compromised remote search provider could exploit this by providing oversized icon...
CVE-2026-92973
ansi2html versions 1.7.0a0 through 1.9.3 contain a cross-site scriptin...
CVE-2026-88922
The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to...
CVE-2026-86231
A security flaw has been discovered in mwiede jsch up to 2.28.5. Affec...
CVE-2026-86818
fast-uri is a dependency-free RFC 3986 URI parser for Node.js, used by...
CVE-2026-91101
HP has identified and remediated multiple externally reported vulnerab...
CVE-2026-91102
HP has identified and remediated multiple externally reported vulnerab...
CVE-2026-91100
HP has identified and remediated multiple externally reported vulnerab...
CVE-2026-91104
HP has identified and remediated multiple externally reported vulnerab...
CVE-2026-91106
HP has identified and remediated multiple externally reported vulnerab...
CVE-2026-91097
HP has identified and remediated multiple externally reported vulnerab...
CVE-2026-91103
HP has identified and remediated multiple externally reported vulnerab...
CVE-2026-91105
HP has identified and remediated multiple externally reported vulnerab...
CVE-2026-92596
Nodemailer before 9.1.0 contains a quadratic time complexity vulnerabi...
CVE-2026-92598
Nodemailer before 9.1.0 fails to apply UTS-46 normalization when encod...
CVE-2026-79752
CakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6...
CVE-2026-91098
HP has identified and remediated multiple externally reported vulnerab...
CVE-2026-91099
HP has identified and remediated multiple externally reported vulnerab...
CVE-2026-109618
out-of-memory handling can interrupt PHP while internal request data is only partially initialized. Request cleanup may then treat the invalid data as valid...
CVE-2026-109619
request-owned internal state can survive after its backing memory has been freed. A later request handled by the same worker may use that stale state before normal initialization resets it...
CVE-2026-79705
A flaw was found in the buildah/copier Go package. When used outside o...
CVE-2026-77406
RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Channe...
CVE-2026-77407
RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, PlainA...
CVE-2026-77408
RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, the wr...