Buscar

ID	Vulnerabilidad	Calificada desde	Publicada
CVE-2026-95502 media	grafana: grafana: Denial of Service via oversized Git Sync responses	27 oct 2026build de las 01:25 UTC	13 oct 2026
CVE-2026-107819 media	mariadb-connector-c: mariadb-connector-c: Information disclosure via improper TLS hostname verification	27 oct 2026build de las 01:25 UTC	9 oct 2026
CVE-2026-107817 media	mariadb: mariadb: Denial of Service via invalid binary JSON in mysql_json plugin	27 oct 2026build de las 01:25 UTC	9 oct 2026
CVE-2026-106061 media	gimp: GIMP: heap buffer over-read in X cursor (XMC) thumbnail loader on crafted file	27 oct 2026build de las 01:25 UTC	7 oct 2026
CVE-2026-80048 media	sssd: sssd-kcm: Local Denial of Service via excessive memory preallocation	27 oct 2026build de las 01:25 UTC	7 oct 2026
CVE-2026-104046 media	sssd: sssd: Denial of Service via incomplete Identity Provider authentication requests	27 oct 2026build de las 01:25 UTC	6 oct 2026
CVE-2026-106063 media	GIMP: GIMP: heap buffer overflow in DICOM export on oversized image dimensions	27 oct 2026build de las 01:25 UTC	6 oct 2026
CVE-2026-104047 media	sssd: sssd: Information disclosure via query injection in Entra ID lookups	27 oct 2026build de las 01:25 UTC	6 oct 2026
CVE-2026-98359 media	kernel: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed	27 oct 2026build de las 01:25 UTC	6 oct 2026
CVE-2026-98169 media	kernel: smb: client: fix potential OOB read in smb3_enum_snapshots()	27 oct 2026build de las 01:25 UTC	6 oct 2026
CVE-2026-92821 media	sssd: SSSD: Access control bypass via premature LDAP access rule evaluation	27 oct 2026build de las 01:25 UTC	6 oct 2026
CVE-2026-104038 media	sssd: sssd: Denial of Service via missing SID extension in certificate mapping	27 oct 2026build de las 01:25 UTC	6 oct 2026
CVE-2026-104036 media	sssd: sssd: Denial of service via out-of-bounds write in NFS idmap plugin	27 oct 2026build de las 01:25 UTC	6 oct 2026
CVE-2026-104034 media	sssd: SSSD: Denial of Service via use-after-free in KCM ticket renewal	27 oct 2026build de las 01:25 UTC	6 oct 2026
CVE-2026-104032 media	sssd: sssd: Denial of Service via unprivileged autofs cache invalidation	27 oct 2026build de las 01:25 UTC	6 oct 2026
CVE-2026-104031 media	sssd: SSSD: Denial of Service via memory exhaustion in autofs responder	27 oct 2026build de las 01:25 UTC	6 oct 2026
CVE-2026-104030 media	sssd: sssd: Denial of Service via out-of-bounds read during passkey parsing	27 oct 2026build de las 01:25 UTC	5 oct 2026
CVE-2026-103531 media	opensc: opensc: Arbitrary code execution via stack-based buffer overflow in card-setcos	27 oct 2026build de las 01:25 UTC	1 oct 2026
CVE-2026-103242 media	rpm: Heap-based buffer overflow write in hex2binv() via a mistyped RPMTAG_FILESIGNATURES header tag	27 oct 2026build de las 01:25 UTC	30 sept 2026
CVE-2026-95520 media	rpm: rpm: integer overflow in iterReadArchiveNext() leads to heap-based buffer overflow when parsing untrusted RPM packages	27 oct 2026build de las 01:25 UTC	29 sept 2026
CVE-2026-98120 media	kernel: netfs: Fix subreq ref leak	27 oct 2026build de las 01:25 UTC	25 sept 2026
CVE-2026-98119 media	kernel: netfs: break unbuffered write when netfs_alloc_subrequest() fails	27 oct 2026build de las 01:25 UTC	25 sept 2026
CVE-2026-88383 media	libical: libical: Denial of Service via crafted iCalendar property parsing	27 oct 2026build de las 01:25 UTC	24 sept 2026
CVE-2026-49919 media	freetype: Integer overflow in FreeType tt_face_colr_blend_layer() leads to heap buffer overflow during COLR font rendering	27 oct 2026build de las 01:25 UTC	8 sept 2026
CVE-2026-116196 media	github.com/rclone/rclone: rclone: Information disclosure via HTTP redirects in B2 backend	26 oct 2026build de las 19:14 UTC	25 oct 2026
CVE-2026-116195 media	github.com/rclone/rclone: rclone: Path traversal via link suffix trimming	26 oct 2026build de las 19:14 UTC	25 oct 2026
CVE-2026-116194 media	github.com/rclone/rclone: rclone: Sensitive data disclosure via CSRF in pCloud OAuth callback	26 oct 2026build de las 19:14 UTC	25 oct 2026
CVE-2026-116192 media	github.com/rclone/rclone: rclone: Information disclosure via Server-Side Request Forgery in rc-serve	26 oct 2026build de las 19:14 UTC	25 oct 2026
CVE-2026-116187 media	github.com/rclone/rclone: rclone: Cross-tenant upload tampering via authorization bypass in S3 authentication proxy	26 oct 2026build de las 19:14 UTC	25 oct 2026
CVE-2026-80785 media	kernel: fbdev: serialize mode sysfs access with lock_fb_info()	26 oct 2026build de las 19:14 UTC	4 sept 2026
CVE-2026-74690 media	kernel: s390/ism: Fix UAF of sba and ieq during ism_dev_exit()	26 oct 2026build de las 19:14 UTC	22 ago 2026
CVE-2026-63862 media	kernel: PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found	26 oct 2026build de las 19:14 UTC	19 jul 2026
CVE-2026-116470 media	keycloak-services: keycloak-services: SCIM user listing endpoint returns full PII without per-user VIEW authorization check	26 oct 2026build de las 19:14 UTC
GHSA-x65r-p6hf-94hv media	Missing authorization on Avo association show endpoint exposes related records	26 oct 2026build de las 19:14 UTC
openSUSE-SU-2026:12259-1 media	MozillaFirefox-158.0.1-1.1 on GA media	26 oct 2026build de las 19:14 UTC
openSUSE-SU-2026:12260-1 media	buildpacks-cli-0.40.10-1.1 on GA media	26 oct 2026build de las 19:14 UTC
openSUSE-SU-2026:12263-1 media	nvidia-open-driver-G06-signed-check-580.196.07-1.1 on GA media	26 oct 2026build de las 19:14 UTC
openSUSE-SU-2026:12265-1 media	python313-wyoming-1.10.2-1.1 on GA media	26 oct 2026build de las 19:14 UTC
openSUSE-SU-2026:12266-1 media	libvips-devel-8.18.7-1.1 on GA media	26 oct 2026build de las 19:14 UTC
openSUSE-SU-2026:22163-1 media	Security update for rabbitmq-server	26 oct 2026build de las 19:14 UTC
openSUSE-SU-2026:22165-1 media	Security update for libmodplug	26 oct 2026build de las 19:14 UTC
CVE-2026-112768 media	Parse Server before 8.6.99 and 9.x before 9.10.3 Information Disclosure via User Update	26 oct 2026build de las 14:38 UTC	19 oct 2026
CVE-2026-116181 media	vllm: vllm: Denial of Service via unvalidated stop token identifiers	26 oct 2026build de las 07:15 UTC	25 oct 2026
CVE-2026-116180 media	vllm: vLLM: Denial of Service via uninitialized log probability tensors	26 oct 2026build de las 07:15 UTC	25 oct 2026
CVE-2026-116178 media	vllm: vLLM: Denial of Service via inconsistent multimodal metadata	26 oct 2026build de las 07:15 UTC	25 oct 2026
CVE-2026-116175 media	vllm: vllm: Denial of Service via audio decompression bomb in chat completions	26 oct 2026build de las 07:15 UTC	25 oct 2026
CVE-2026-116174 media	vllm: vllm: Denial of Service via invalid prompt token IDs in gRPC service	26 oct 2026build de las 07:15 UTC	25 oct 2026
CVE-2026-116173 media	vllm: vllm: Denial of Service via excessive candidate token IDs in gRPC interface	26 oct 2026build de las 07:15 UTC	25 oct 2026
CVE-2026-116172 media	vllm: vLLM: Denial of Service via improper input validation in Rust gRPC interface	26 oct 2026build de las 07:15 UTC	25 oct 2026
CVE-2026-116155 media	ImageMagick: ImageMagick: Denial of Service via crafted XMP profile memory leak	26 oct 2026build de las 07:15 UTC	25 oct 2026

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.