Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    Packages

    upx

    Summary

    heap-based buffer over-read was discovered in the invert_pt_dynamic function in p_lx_elf

    Published
    31 Oct 2026
    CGA-8j7j-j6g7-829p
    Fix available
    Packages

    wazuh-manager-framework

    Summary

    Published
    31 Oct 2026
    CGA-cfg7-jr9m-vmw6
    Fix available
    Packages

    wazuh-manager-framework

    Summary

    Published
    31 Oct 2026
    CGA-375q-2vjm-pvxg
    Fix available
    Packages

    wazuh-manager-framework

    Summary

    Published
    31 Oct 2026
    Packages

    vim

    Summary

    vim is vulnerable to Heap-based Buffer Overflow

    Published
    31 Oct 2026
    CGA-g2wr-j7rx-9mc3
    Fix available
    Packages

    wazuh-manager-framework

    Summary

    Published
    31 Oct 2026
    Packages

    upx

    Summary

    heap buffer overflow read was discovered in upx 4

    Published
    31 Oct 2026
    Packages

    sane

    Summary

    NULL pointer dereference in sanei_epson_net_read in SANE Backends before 1

    Published
    31 Oct 2026
    Packages

    vim

    Summary

    vim is vulnerable to Heap-based Buffer Overflow

    Published
    31 Oct 2026
    Packages

    upx

    Summary

    Segmentation fault was found in UPX in PackLinuxElf64::invert_pt_dynamic() in p_lx_elf

    Published
    31 Oct 2026
    Packages

    sane

    Summary

    NULL pointer dereference in SANE Backends before 1

    Published
    31 Oct 2026
    Packages

    vim

    Summary

    vim is vulnerable to Heap-based Buffer Overflow

    Published
    31 Oct 2026
    CGA-cqf3-rwcj-7qm6
    Fix available
    Packages

    tileserver-gl-fips

    Summary

    Published
    31 Oct 2026
    CGA-2932-c625-9gfw
    Fix available
    Packages

    tileserver-gl-fips

    Summary

    Published
    31 Oct 2026
    Packages

    upx

    Summary

    heap-based buffer overflow issue was discovered in UPX in PackTmt::pack() in p_tmt

    Published
    31 Oct 2026
    CGA-wr39-j4fg-gqpp
    Fix available
    Packages

    tileserver-gl-fips

    Summary

    Published
    31 Oct 2026
    CGA-95j3-4hvr-6ph7
    Fix available
    Packages

    tileserver-gl-fips

    Summary

    Published
    31 Oct 2026
    CGA-4f89-9wvw-w72g
    Fix available
    Packages

    tileserver-gl-fips

    Summary

    Published
    31 Oct 2026
    Packages

    sane

    Summary

    heap buffer overflow in SANE Backends before 1

    Published
    31 Oct 2026
    Packages

    vim

    Summary

    vim is vulnerable to Use After Free

    Published
    31 Oct 2026
    CGA-gqrg-hxqx-pmv9
    No fix available
    Packages

    tileserver-gl-fips

    Summary

    Published
    31 Oct 2026
    Packages

    sane

    Summary

    out-of-bounds read in SANE Backends before 1

    Published
    31 Oct 2026
    Packages

    vim

    Summary

    vim is vulnerable to Out-of-bounds Read

    Published
    31 Oct 2026
    Packages

    sane

    Summary

    out-of-bounds read in SANE Backends before 1

    Published
    31 Oct 2026
    Packages

    vim

    Summary

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER

    Published
    31 Oct 2026
    Packages

    sane

    Summary

    out-of-bounds read in SANE Backends before 1

    Published
    31 Oct 2026
    Packages

    vim

    Summary

    vim is vulnerable to Out-of-bounds Read

    Published
    31 Oct 2026
    Packages

    thunderbird

    Summary

    If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-origin information, when said information is served as chunked data

    Published
    31 Oct 2026
    Packages

    sane

    Summary

    heap buffer overflow in SANE Backends before 1

    Published
    31 Oct 2026
    Packages

    vim

    Summary

    vim is vulnerable to Use After Free

    Published
    31 Oct 2026
    Packages

    vim

    Summary

    vim is vulnerable to Use After Free

    Published
    31 Oct 2026
    Packages

    thunderbird

    Summary

    During the plaintext phase of the STARTTLS connection setup, protocol commands could have been injected and evaluated within the encrypted session

    Published
    31 Oct 2026
    CGA-gq64-c599-9xj8
    Fix available
    Packages

    wazuh-manager-framework-fips

    Summary

    Published
    31 Oct 2026
    CGA-vr25-84hq-4qmw
    Fix available
    Packages

    wazuh-manager-framework-fips

    Summary

    Published
    31 Oct 2026
    CGA-9m97-f5ww-6vx6
    Fix available
    Packages

    wazuh-manager-framework-fips

    Summary

    Published
    31 Oct 2026
    Packages

    vim

    Summary

    vim is vulnerable to Use After Free

    Published
    31 Oct 2026
    CGA-63qq-hr82-c45g
    Fix available
    Packages

    wazuh-manager-framework-fips

    Summary

    Published
    31 Oct 2026
    Packages

    vim

    Summary

    vim is vulnerable to Out-of-bounds Read

    Published
    31 Oct 2026
    Packages

    vim

    Summary

    vim is vulnerable to Heap-based Buffer Overflow

    Published
    31 Oct 2026
    Packages

    vim

    Summary

    vim is vulnerable to Use After Free

    Published
    31 Oct 2026
    Packages

    vim

    Summary

    Use After Free in GitHub repository vim/vim prior to 8

    Published
    31 Oct 2026
    Packages

    vim

    Summary

    Heap-based Buffer Overflow GitHub repository vim/vim prior to 8

    Published
    31 Oct 2026
    Packages

    vim

    Summary

    Use After Free in GitHub repository vim/vim prior to 8

    Published
    31 Oct 2026
    Packages

    vim

    Summary

    Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8

    Published
    31 Oct 2026
    Packages

    vim

    Summary

    Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8

    Published
    31 Oct 2026
    Packages

    thunderbird

    Summary

    use-after-free could have occured when an HTTP2 session object was released on a different thread, leading to memory corruption and a potentially exploitable crash

    Published
    31 Oct 2026
    Packages

    postgresql-timescaledb

    Summary

    TimescaleDB, an open-source time-series SQL database, has a privilege escalation vulnerability in versions 2

    Published
    31 Oct 2026
    Packages

    vim

    Summary

    Out-of-bounds Read in GitHub repository vim/vim prior to 8

    Published
    31 Oct 2026
    Packages

    thunderbird

    Summary

    Mozilla developers and community members reported memory safety bugs present in Firefox 93 and Firefox ESR 91

    Published
    31 Oct 2026
    Packages

    vim

    Summary

    Heap-based Buffer Overflow in GitHub repository vim prior to 8

    Published
    31 Oct 2026