VulnSea

enterprise_linux vulnerabilities

CVEs whose affected-version data names the enterprise_linux package (go, maven, npm, pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

663 CVEsRSS

CVE-2026-54515Medium· 5.3PoC
3mo ago

jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified (CVE-2026-54515)

A flaw was found in jackson-databind. This vulnerability occurs in the data-binding functionality where properties intended to be ignored are incorrectly restored and become writable again. An attacker could potentially exploit this by pro…

▾ TwilightRed Hat · Red Hat JBoss EAP 8.1 for RHEL 8EPSS 0.37%via CSAF
CVE-2026-12725Medium· 5.9
3mo ago

A heap-based buffer overflow was found in dnsmasq

A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of DS or DNSKEY replies containing unsupported algorithm or digest types can cause dnsmasq to write past the end of an …

▾ Sunlitredhat · openshift_container_platformEPSS 0.53%via NVD
CVE-2026-53550Medium· 5.3
3mo ago

js-yaml: js-yaml: Denial of Service via crafted YAML merge keys (CVE-2026-53550)

A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker can exploit this vulnerability by providing a specially crafted YAML document that repeatedly uses the same alias in a merge sequence. This can lead to alg…

▾ SunlitRed Hat · Red Hat Openshift Data Foundation 4.18EPSS 0.39%via CSAF
CVE-2026-42055High· 8.1PoC
3mo ago

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_proxy_v2_module and ngx_http_grpc_module modules. This vulnerability exists when the proxy_http_version to 2 or grpc_pass directives are used to proxy HTTP/2 traffic, …

▾ Midnightf5 · dosEPSS 6.5%via NVD
CVE-2026-5038High· 7.5⚖ disputed
3mo ago

multer: Multer: Denial of Service via aborted or malformed multipart uploads (CVE-2026-5038)

A flaw was found in multer. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by initiating and then aborting or sending malformed multipart uploads. This action leaves orphaned partial files on the disk, whi…

▾ TwilightRed Hat · Red Hat Enterprise Linux 10EPSS 0.28%via CSAF
CVE-2026-5079High· 7.5
3mo ago

multer: Multer: Denial of Service via deeply nested field names in multipart form data (CVE-2026-5079)

A flaw was found in Multer. A remote attacker can exploit this vulnerability by sending a single HTTP request with crafted multipart form data containing deeply nested field names. This can force the allocation of deeply nested object stru…

▾ TwilightRed Hat · Red Hat Enterprise Linux 10EPSS 0.28%via CSAF
CVE-2026-54411Medium· 5.9
3mo ago

Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-password comparison path in modules/pam_userdb/pam_userdb.c that allows a local or network-adjacent attacker able to repeate…

Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-password comparison path in modules/pam_userdb/pam_userdb.c that allows a local or network-adjacent attacker able to repeate…

▾ SunlitRed Hat · Red Hat Enterprise Linux AppStream (v. 9)EPSS 0.32%via NVD
CVE-2026-54231Medium· 5.5
3mo ago

A content injection vulnerability was found in the ABRT post-create event handler scripts in libreport

A content injection vulnerability was found in the ABRT post-create event handler scripts in libreport. The event script queries the systemd journal for log entries matching the crashed process and writes the results to files in the dump…

▾ Sunlitredhat · automatic_bug_reporting_toolEPSS 0.18%via NVD
CVE-2026-54230High· 7.0
3mo ago

A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport

A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event scripts write output files using shell redirections without the O_NOFOLLOW flag. If the target file is replaced with a symlink,…

▾ Twilightredhat · automatic_bug_reporting_toolEPSS 0.18%via NVD
CVE-2026-44172Critical· 9.1⚖ disputed
3mo ago

MariaDB server is a community developed fork of MySQL server

MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysql_real_escape_string() and sending it to the database using text pr…

▾ Midnightmariadb · mariadbEPSS 0.68%via NVD
CVE-2026-46625High· 7.5PoC
3mo ago

JavaScript Cookie is a JavaScript API for handling cookies, client-side

JavaScript Cookie is a JavaScript API for handling cookies, client-side. Prior to version 3.0.7, js-cookie's internal assign() helper copies properties with for...in + plain assignment. When the source object is produced by JSON.parse, t…

▾ Midnightjs-cookie · javascript_cookieEPSS 0.92%via NVD
CVE-2026-11788Medium· 5.9
3mo ago

A flaw was found in 389 Directory Server

A flaw was found in 389 Directory Server. The dereference control plugin does not check for allocation failure before using a BER structure, allowing an unauthenticated remote attacker to crash the LDAP server when the system is under me…

▾ Sunlitredhat · directory_serverEPSS 0.56%via NVD
CVE-2026-9669Medium· 5.9
3mo ago

bz2.BZ2Decompressor objects could be reused after a decompression error

bz2.BZ2Decompressor objects could be reused after a decompression error. If an application caught the resulting OSError and retried with the same decompressor, crafted input could cause the decompressor to resume from an invalid internal…

▾ SunlitRed Hat · Red Hat Enterprise Linux 8EPSS 0.68%via NVD
CVE-2026-45409Medium· 5.3
3mo ago

python-idna: idna: Denial of Service via specially crafted long inputs (CVE-2026-45409)

A flaw was found in the idna library, which handles Internationalized Domain Names in Python applications. A remote attacker could exploit this vulnerability by sending specially crafted, excessively long inputs to the library's encoding f…

▾ SunlitRed Hat · Red Hat Enterprise Linux 9EPSS 0.41%via CSAF
CVE-2026-50264High· 7.8
3mo ago

An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat

An out-of-bounds write flaw was found in the X.Org X server and Xwayland in DRIGetBuffers/DRIGetBuffersWithFormat. A client that requests multiple DRI2BufferBackLeft attachments and one DRI2BufferFrontLeft can trigger an out-of-bounds he…

▾ Twilightx.org · x_serverEPSS 0.15%via NVD
CVE-2026-50263Medium· 5.5
3mo ago

A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow()

A use-after-free flaw was found in the X.Org X server and Xwayland in CreateSaverWindow(). A client can trigger a use-after-free read after changing window attributes and forcing the screen saver, leading to information disclosure.

▾ Sunlitx.org · x_serverEPSS 0.14%via NVD
CVE-2026-50262Medium· 5.5
3mo ago

An out-of-bounds read flaw was found in the X.Org X server and Xwayland in __glXDisp_ChangeDrawableAttributes()

An out-of-bounds read flaw was found in the X.Org X server and Xwayland in __glXDisp_ChangeDrawableAttributes(). A wrong size validation check can read a client-controlled number of bytes, exceeding the request buffer, leading to informa…

▾ Sunlitx.org · x_serverEPSS 0.13%via NVD
CVE-2026-50261High· 7.8
3mo ago

A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter()

A use-after-free flaw was found in the X.Org X server and Xwayland in SyncChangeCounter(). A client that sets up multiple SyncCounters can trigger a use-after-free when destroying those counters via a second client connection while chang…

▾ Twilightx.org · x_serverEPSS 0.15%via NVD
CVE-2026-50260High· 7.8
3mo ago

A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter()

A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter(). A client that sets up multiple SyncCounters and awaits on those triggers can trigger a use-after-free when destroying those counters via a second client…

▾ Twilightx.org · x_serverEPSS 0.15%via NVD
CVE-2026-50259High· 7.8
3mo ago

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. _XkbSetMapChecks() declares a fixed-size stack buffer mapWidths[256] indexed by key type index. The helper function CheckKeyTypes() writes to this buffer at…

▾ Twilightx.org · x_serverEPSS 0.17%via NVD
CVE-2026-50258High· 7.8
3mo ago

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. The X server has multiple stack buffers sized XkbMaxShiftLevel * XkbNumKbdGroups but CheckKeyTypes() does not verify or clamp non-canonical key types to Xkb…

▾ Twilightx.org · x_serverEPSS 0.16%via NVD
CVE-2026-50257High· 7.8
3mo ago

A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence()

A use-after-free flaw was found in the X.Org X server and Xwayland in miSyncDestroyFence(). A client that sets up multiple fence triggers can trigger a use-after-free function pointer call. An attacker would connect to the X server to se…

▾ Twilightx.org · x_serverEPSS 0.14%via NVD
CVE-2026-50256High· 7.8
3mo ago

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland

A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. A mismatch between the X server and the libXfont2 library's maximum font name length can cause a stack buffer overflow during font alias resolution. The ser…

▾ Twilightx.org · x_serverEPSS 0.16%via NVD
CVE-2026-41178High· 7.5
3mo ago

github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denia…

A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length i…

▾ TwilightRed Hat · Red Hat Openshift Data Foundation 4.22EPSS 0.34%via CSAF
CVE-2026-4408Critical· 9.0PoC
4mo ago

A flaw was found in Samba

A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution characte…

▾ Abyssalredhat · openshift_container_platformEPSS 2.5%via NVD
CVE-2026-2340Medium· 6.5
4mo ago

A flaw was found in Samba’s vfs_worm module

A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read-many (WORM) protections by preventing modification of files after a configurable grace period. Due to insufficient validation during rename o…

▾ Sunlitredhat · openshift_container_platformEPSS 0.94%via NVD
CVE-2026-1933High· 7.1
4mo ago

A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes

A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks, authenticated users with underlying filesystem write permissions may create or delete re…

▾ Twilightredhat · openshift_container_platformEPSS 0.86%via NVD
CVE-2026-3012High· 8.0
4mo ago

A flaw was found in Samba’s certificate auto-enrollment Group Policy handling

A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store…

▾ Twilightredhat · openshift_container_platformEPSS 0.26%via NVD
CVE-2026-48864High· 7.8
4mo ago

A flaw was found in libsolv

A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker-controlled compressed data within `.solv` files due to insufficient input validation. An attacker can provide a specially crafted `.solv` …

▾ Twilightopensuse · libsolvEPSS 0.23%via NVD
CVE-2026-39831High· 8.1
4mo ago

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check (CVE-2026-39831)

A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardw…

▾ TwilightRed Hat · Red Hat Openshift Data Foundation 4.22EPSS 0.42%via CSAF
enterprise_linux vulnerabilities (CVEs) — page 16 · VulnSea