TI-2026-04544 CVE-2026-5201 · GHSA-9pr2-m366-8728
Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image
Priority MEDIUM 41
A flaw was found in the gdk-pixbuf library.
Vulnerabilities
1061 records
TI-2026-04164 CVE-2026-4775 · GHSA-cm99-m826-vgg7
Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing
Priority LOW 37
A flaw was found in the libtiff library.
TI-2026-03838 CVE-2026-4424 · GHSA-c75f-55f6-f63q
Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing
Priority MEDIUM 41
A flaw was found in libarchive.
TI-2025-12426 CVE-2025-13601 · GHSA-v6c5-9mp4-mwq4
Glib: integer overflow in in g_escape_uri_string()
Priority LOW 34
A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function.
TI-2025-05441 CVE-2025-6021 · GHSA-32vr-5hxf-x93f
Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2
Priority HIGH 72
A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow.
TI-2025-02756 CVE-2025-3155 · GHSA-h7mx-548v-cr9r
Yelp: arbitrary file read
Priority HIGH 66
A flaw was found in Yelp.
TI-2025-02434 CVE-2025-2784 · GHSA-5qxx-2mqf-3v7g
Libsoup: heap buffer over-read in `skip_insignificant_space` when sniffing content
Priority MEDIUM 64
A flaw was found in libsoup.
TI-2025-01513 CVE-2025-1756 · GHSA-f5w3-73h4-jpcm
MongoDB Shell may be susceptible to local privilege escalation in Windows
Priority LOW 35
mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a crafted file is stored in C:\node_modules\.
TI-2024-11211 CVE-2024-12087 · GHSA-9x68-7qq6-v523
Rsync: path traversal vulnerability in rsync
Priority HIGH 66
A path traversal vulnerability exists in rsync.
TI-2024-11212 CVE-2024-12088 · GHSA-ffph-g3pc-8r3g
Rsync: --safe-links option bypass leads to path traversal
Priority HIGH 66
A flaw was found in rsync.
TI-2024-11209 CVE-2024-12085 · GHSA-xh5q-pch5-g3xq
Rsync: info leak via uninitialized stack contents
Priority HIGH 72
A flaw was found in rsync which could be triggered when rsync compares file checksums.
TI-2024-08977 CVE-2024-9676 · GHSA-wq2p-5pc6-wpgf
Path traversal in containers/storage
Priority LOW 32
A vulnerability was found in Podman, Buildah, and CRI-O.
TI-2024-08976 CVE-2024-9675 · GHSA-586p-749j-fhwp
Buildah: buildah allows arbitrary directory mount
Priority LOW 34
A vulnerability was found in Buildah.
TI-2024-06501 CVE-2024-7006 · GHSA-r7x8-hv2q-v9r7
Libtiff: null pointer dereference in tif_dirinfo.c
Priority MEDIUM 42
A null pointer dereference flaw was found in Libtiff via `tif_dirinfo.c`.
TI-2024-05929 CVE-2024-6387 · GHSA-2x8c-95vh-gfv4
Openssh: regresshion - race condition in ssh allows rce/dos
Priority HIGH 82
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd).
TI-2023-03511 CVE-2023-3758 · GHSA-7pwr-cfrc-px4f
Sssd: race condition during authorization leads to gpo policies functioning inconsistently
Priority LOW 35
A race condition flaw was found in sssd where the GPO policy is not consistently applied for authenticated users.
TI-2022-08622 CVE-2022-24809
net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
Priority LOW 31
net-snmp provides various tools relating to the Simple Network Management Protocol.
TI-2022-08621 CVE-2022-24808
net-snmp: A malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
Priority LOW 31
net-snmp provides various tools relating to the Simple Network Management Protocol.
TI-2022-08620 CVE-2022-24807
Buffer overflow in net-snmp
Priority LOW 31
net-snmp provides various tools relating to the Simple Network Management Protocol.
TI-2022-08619 CVE-2022-24806
net-snmp vulnerable to Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously
Priority LOW 31
net-snmp provides various tools relating to the Simple Network Management Protocol.
TI-2022-08618 CVE-2022-24805
net-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
Priority MEDIUM 41
net-snmp provides various tools relating to the Simple Network Management Protocol.
TI-2024-01390 CVE-2024-1488 · GHSA-35qh-7f6c-rjf7
Unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation
Priority LOW 35
A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration.
TI-2024-00983 CVE-2024-1062 · GHSA-6v6c-gc45-x65c
389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)
Priority LOW 25
A heap overflow flaw was found in 389-ds-base.
TI-2023-05991 CVE-2023-6536 · GHSA-xw3g-x45j-xxhh
Kernel: null pointer dereference in __nvmet_req_complete
Priority LOW 36
A flaw was found in the Linux kernel's NVMe driver.
TI-2023-05990 CVE-2023-6535 · GHSA-v8xr-j3gp-fmxj
Kernel: null pointer dereference in nvmet_tcp_execute_request
Priority LOW 36
A flaw was found in the Linux kernel's NVMe driver.