Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    UBUNTU-CVE-2026-120757
    No fix available
    Packages

    hdf5, hdf5, hdf5, hdf5, hdf5, hdf5, hdf5, hdf5

    Summary

    Published
    3 Nov 2026
    UBUNTU-CVE-2026-65168
    No fix available
    Packages

    slurm-wlm, slurm-wlm, slurm-wlm, slurm-wlm

    Summary

    Published
    3 Nov 2026
    UBUNTU-CVE-2026-65107
    No fix available
    Packages

    slurm-wlm, slurm-wlm, slurm-wlm, slurm-wlm

    Summary

    Published
    3 Nov 2026
    UBUNTU-CVE-2026-65108
    No fix available
    Packages

    slurm-wlm, slurm-wlm, slurm-wlm, slurm-wlm

    Summary

    Published
    3 Nov 2026
    UBUNTU-CVE-2026-65138
    No fix available
    Packages

    slurm-wlm, slurm-wlm, slurm-wlm, slurm-wlm

    Summary

    Published
    3 Nov 2026
    UBUNTU-CVE-2026-65139
    No fix available
    Packages

    slurm-wlm, slurm-wlm, slurm-wlm, slurm-wlm

    Summary

    Published
    3 Nov 2026
    UBUNTU-CVE-2026-114582
    No fix available
    Packages

    python-django, python-django, python-django, python-django, python-django, python-django, python-django, python-django

    Summary

    Published
    3 Nov 2026
    UBUNTU-CVE-2026-65140
    No fix available
    Packages

    slurm-wlm, slurm-wlm, slurm-wlm, slurm-wlm

    Summary

    Published
    3 Nov 2026
    UBUNTU-CVE-2026-65165
    No fix available
    Packages

    slurm-wlm, slurm-wlm, slurm-wlm, slurm-wlm

    Summary

    Published
    3 Nov 2026
    UBUNTU-CVE-2026-113593
    No fix available
    Packages

    python-django, python-django, python-django, python-django, python-django, python-django, python-django, python-django

    Summary

    Published
    3 Nov 2026
    CVE-2026-119673
    Fix available
    Packages

    Summary

    mongofiles may write outside the working directory through a symlink

    Published
    3 Nov 2026
    Packages

    qs

    Summary

    TuxCare security update for qs (1 CVE)

    Published
    3 Nov 2026
    Packages

    qs

    Summary

    TuxCare security update for qs (1 CVE)

    Published
    3 Nov 2026
    CVE-2026-119672
    Fix available
    Packages

    Summary

    mongofiles may disclose GridFS content to standard output through a stored filename

    Published
    3 Nov 2026
    CVE-2026-119675
    Fix available
    Packages

    Summary

    mongorestore may bypass collection guards through a system.buckets prefix

    Published
    3 Nov 2026
    USN-8975-1
    Fix available
    Packages

    libsoup2.4, libsoup2.4, libsoup2.4, libsoup2.4, libsoup3, libsoup2.4, libsoup3, libsoup3, libsoup3, libsoup2.4

    Summary

    libsoup2.4, libsoup3 vulnerabilities

    Published
    3 Nov 2026
    Packages

    ch.qos.logback:logback-core

    Summary

    TuxCare security update for ch.qos.logback:logback-core (3 CVEs)

    Published
    3 Nov 2026
    Packages

    io.netty:netty-codec-haproxy, io.netty:netty-codec-http, io.netty:netty-codec-http2, io.netty:netty-codec-redis

    Summary

    TuxCare security update for io.netty (10 CVEs)

    Published
    3 Nov 2026
    Packages

    org.springframework.hateoas:spring-hateoas

    Summary

    TuxCare security update for org.springframework.hateoas:spring-hateoas (1 CVE)

    Published
    3 Nov 2026
    Packages

    io.netty:netty

    Summary

    TuxCare security update for io.netty:netty (4 CVEs)

    Published
    3 Nov 2026
    Packages

    org.springframework.amqp:spring-amqp

    Summary

    TuxCare security update for org.springframework.amqp:spring-amqp (1 CVE)

    Published
    3 Nov 2026
    Packages

    astro

    Summary

    TuxCare security update for astro (2 CVEs)

    Published
    3 Nov 2026
    Packages

    systeminformation

    Summary

    TuxCare security update for systeminformation (1 CVE)

    Published
    3 Nov 2026
    DEBIAN-CVE-2026-114418
    No fix available
    Packages

    phodav, phodav, phodav

    Summary

    Published
    3 Nov 2026
    DEBIAN-CVE-2026-114417
    No fix available
    Packages

    phodav, phodav, phodav

    Summary

    Published
    3 Nov 2026
    CVE-2026-118505
    Fix available
    Packages

    Summary

    AshAuthentication brute_force_strategy does not limit sign-in and request actions defined on the resource

    Published
    3 Nov 2026
    EEF-CVE-2026-118505
    Fix available
    Packages

    ash_authentication,

    Summary

    AshAuthentication brute_force_strategy does not limit sign-in and request actions defined on the resource

    Published
    3 Nov 2026
    DEBIAN-CVE-2026-114419
    No fix available
    Packages

    phodav, phodav, phodav

    Summary

    Published
    3 Nov 2026
    CGA-hp2w-4w8r-2vrg
    Fix available
    Packages

    heartbeat-9.5

    Summary

    Published
    3 Nov 2026
    CGA-95f5-p2rw-gmhg
    Fix available
    Packages

    heartbeat-9.5

    Summary

    Published
    3 Nov 2026
    CGA-2p76-crc5-48rh
    No fix available
    Packages

    heartbeat-9.5

    Summary

    Published
    3 Nov 2026
    CGA-vph5-x83f-7hq7
    Fix available
    Packages

    heartbeat-9.5

    Summary

    Published
    3 Nov 2026
    CGA-3679-hp4f-f33p
    Fix available
    Packages

    heartbeat-9.5

    Summary

    Published
    3 Nov 2026
    EEF-CVE-2026-119215
    Fix available
    Packages

    ash_authentication,

    Summary

    AshAuthentication TOTP setup lets a user install their own authenticator secret on another user's account

    Published
    3 Nov 2026
    CVE-2026-119215
    Fix available
    Packages

    Summary

    AshAuthentication TOTP setup lets a user install their own authenticator secret on another user's account

    Published
    3 Nov 2026
    USN-8974-1
    Fix available
    Packages

    pcre2, pcre2, pcre2, pcre2, pcre2, pcre2, pcre2

    Summary

    pcre2 vulnerabilities

    Published
    3 Nov 2026
    CVE-2026-114582
    Fix available
    Packages

    Summary

    Server-side request forgery via SpatialReference string input

    Published
    3 Nov 2026
    CVE-2026-113733
    Fix available
    Packages

    Summary

    Password hash disclosure to "view only" admin users with custom user models

    Published
    3 Nov 2026
    CVE-2026-113593
    Fix available
    Packages

    Summary

    Potential exposure of private data via empty and missing Vary headers

    Published
    3 Nov 2026
    CVE-2026-111362
    Fix available
    Packages

    Summary

    Server-side request forgery via crs member of GeoJSON geometries

    Published
    3 Nov 2026
    CVE-2026-111211
    Fix available
    Packages

    Summary

    Potential log injection via unescaped geometry form values

    Published
    3 Nov 2026
    CVE-2026-108147
    Fix available
    Packages

    Summary

    Potential memory exhaustion in MultiPartParser via base64-encoded file upload

    Published
    3 Nov 2026
    CVE-2026-120758
    No fix available
    Packages

    Summary

    NULL Pointer Dereference in H5HL_unprotect via Corrupted File

    Published
    3 Nov 2026
    CVE-2026-120757
    No fix available
    Packages

    Summary

    Heap Buffer Over-read via Non-Terminated Link Data in H5L__extern_traverse

    Published
    3 Nov 2026
    CVE-2026-121578
    Fix available
    Packages

    Summary

    CVE-2026-121578

    Published
    3 Nov 2026
    CVE-2026-120756
    No fix available
    Packages

    Summary

    Heap Buffer Over-read via Malformed Message Size in HDF5's H5O__chunk_deserialize

    Published
    3 Nov 2026
    CVE-2026-120755
    No fix available
    Packages

    Summary

    Integer Underflow Leads to Out-of-Bounds Read via Truncated Chunk in HDF5 Szip Filter

    Published
    3 Nov 2026
    CVE-2026-118487
    No fix available
    Packages

    Summary

    Heap exhaustion via unbounded line accumulation in Vert.x STOMP FrameParser

    Published
    3 Nov 2026
    CVE-2026-119741
    Fix available
    Packages

    Summary

    rsync < 3.5.2 Denial of Service via hash_search() Checksum Collisions

    Published
    3 Nov 2026
    SUSE-SU-2026:5090-1
    Fix available
    Packages

    parted, parted

    Summary

    Security update for parted

    Published
    3 Nov 2026