Underflow in PHP-FPM can lead to RCE

The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability

mod_proxy SSRF

Apple Multiple Products Buffer Overflow Vulnerability

Google Chromium libvpx Heap Buffer Overflow Vulnerability

Apple Multiple Products WebKit Use-After-Free Vulnerability

WebKitGTK Memory Corruption Vulnerability

crypto: algif_aead - Revert to operating out-of-place

Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability

Glibc: buffer overflow in ld.so leading to privilege escalation

Linux Kernel Privilege Escalation Vulnerability

Linux Kernel Improper Authentication Vulnerability

Red Hat Polkit Out-of-Bounds Read and Write Vulnerability

Linux Kernel Improper Privilege Management Vulnerability

Apache HTTP Server Privilege Escalation Vulnerability

Linux Kernel PIE Stack Buffer Corruption Vulnerability

Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability

Linux Kernel Improper Input Validation Vulnerability

Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor

Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability

ISC BIND Data Processing Errors Vulnerability

Red Hat Libuser Race Condition Vulnerability

Linux Kernel Race Condition Vulnerability

Linux Kernel Race Condition Vulnerability

Gimp: gimp: arbitrary code execution in psd plugin due to unsigned underflow

Libsoup: libsoup: heap buffer overflow during outgoing permessage-deflate buffer growth

ipv6: fix possible UAF in icmpv6_rcv()

netfilter: conntrack: remove sprintf usage

Samba: remote code execution in samr

Gnutls: gnutls: authentication bypass via nul character in username

A flaw was found in Keylime

Glib: glib: buffer underflow in gvariant parser leads to heap corruption

Rsync: heap buffer overflow in rsync due to improper checksum length handling

A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory

A vulnerability was found in ImageMagick

A flaw was found in moodle where logic used to count failed login attempts could result in the account lockout threshold being bypassed

A flaw was found in moodle where an SQL injection risk was identified in Badges code relating to configuring criteria

A flaw was found in mbsync versions prior to 1.4.4

Missing fixes for CVE-2021-40438 and CVE-2021-26691 in the versions of httpd, as shipped in Red Hat Enterprise Linux 8.5.0, causes a security regression compared to the versions…

A flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint information for further use in traditional network attacks

Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via malicious crafted SPF…

A flaw was found in the ZeroMQ server in versions before 4.3.3

A flaw was found in libwebp in versions before 1.0.1

A flaw was found in libwebp in versions before 1.0.1

A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol()

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16()

A flaw was found in libmicrohttpd

A flaw was found in http-proxy-agent, prior to version 2.1.0