Open Source Vulnerabilities

go

On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -lto_library flag in a "#cgo LDFLAGS" directive

go

path traversal vulnerability exists in filepath

go

On Windows, restricted files can be accessed via os

go

Due to unsanitized NUL values, attackers may be able to maliciously set environment variables on Windows

cacti

Cacti 1

cacti

Cacti 1

cacti

graph_realtime

cacti

SQL injection issue in color

cacti

PHPMailer before 6

cacti

issue was discovered in Cacti 1

gimp

GIMP PSP File Parsing Off-By-One Remote Code Execution Vulnerability

gimp

GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability

gimp

GIMP PSD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

epiphany

XSS can occur in GNOME Web (aka Epiphany) before 40

gimp

GIMP DDS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

epiphany

XSS can occur in GNOME Web (aka Epiphany) before 40

epiphany

XSS can occur in GNOME Web (aka Epiphany) before 40

glibc, glibc, glibc

gettext

CVE-2026-84243 affecting package gettext 0.22-1

glibc

CVE-2026-84243 affecting package glibc 2.38-21

drupal7

Drupal core does not properly sanitize certain filenames on uploaded files, which can lead to files being interpreted as the incorrect extension and served as the wrong MIME type or executed as PHP...

ffmpeg

av_color_primaries_name function in libavutil/pixdesc

ffmpeg

In libavformat/asfdec_f

ffmpeg

In libavformat/mov

ffmpeg

In libavformat/nsvdec

ffmpeg

In libavformat/mxfdec

ffmpeg

In the mxf_read_primer_pack function in libavformat/mxfdec

eglibc, glibc, glibc, glibc, glibc, glibc, glibc, glibc

ffmpeg

In FFmpeg 3

ffmpeg

In FFmpeg 2

ffmpeg

In FFmpeg 3

ffmpeg

In libavformat/rl2

ffmpeg

In libavformat/mvdec

litestream, litestream, litestream, litestream, k8sgpt, dotnet6-build, dotnet6-build, dotnet6-build, dotnet6-runtime, dotnet6-runtime, dotnet6-runtime

HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023

ffmpeg

In libavformat/rmdec

ffmpeg

libavformat/movenc

dotnet6-build, dotnet6-build, dotnet6-build, dotnet6-runtime, dotnet6-runtime, dotnet6-runtime

.NET Core and Visual Studio Denial of Service Vulnerability

ffmpeg

In FFmpeg 4

cloudprober

cloudflared

cloudflared-fips

cloudflared

cloudflared-fips

cloudflared-fips

cloudflared

cloudflared

cloudflared-fips

ffmpeg

In FFmpeg 3

dotnet6-build, dotnet6-build, dotnet6-build, dotnet6-runtime, dotnet6-runtime, dotnet6-runtime

Visual Studio Remote Code Execution Vulnerability

ffmpeg

improper integer type in the mpeg4_encode_gop_header function in libavcodec/mpeg4videoenc