CRITICAL9.8CVE-2026-11526GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments in _make_filehandle.
CRITICAL9.8Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification.
LOW3.7Issue summary: The CMS_decrypt and PKCS7_decrypt functions are vulnerable to Bleichenbacher-style attack when an attacker is able to provid…
CRITICAL9.1Issue Summary: Cryptographic Message Services (CMS) processing fails to perform sufficient input validation on the cipher and tag length fi…
LOW3.7Issue summary: When EVP_PKEY_derive_set_peer() is called with a DHX (X9.42) peer key, the peer key is not properly checked for the subgroup…
LOW3.17-Zip is a file archiver with a high compression ratio.
CRITICAL9.0EPSS 0.39%A flaw was found in Samba.
CRITICAL9.8EPSS 0.04%A use-after-free vulnerability exists within the DNS-over-HTTPS implementation.
CRITICAL10.0EPSS 0.03%NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to poisoning via promiscuous records for the authority section.
CRITICAL9.8EPSS 0.32%NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables denial of service and…
LOW3.7EPSS 0.04%Rsync versions before 3.4.3 contain an off-by-one out-of-bounds stack write vulnerability in the establish_proxy_connection() function in s…
CRITICAL9.8EPSS 0.10%NGINX JavaScript has a vulnerability when the js_fetch_proxy directive is configured with at least one client-controlled NGINX variable (fo…
CRITICAL9.8EPSS 0.13%A flaw was found in gnutls.
CRITICAL9.8EPSS 0.02%Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header()
LOW3.7EPSS 0.02%A flaw was found in gnutls.
CRITICAL9.1EPSS 0.10%A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and non-zero offset, leading to an integer underflow du…
LOW3.7EPSS 0.04%A flaw was found in gnutls.
CRITICAL9.8EPSS 0.07%PJSIP is a free and open source multimedia communication library written in C.
CRITICAL9.8EPSS 0.02%Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption
LOW2.9EPSS 0.01%libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.
CRITICAL9.8EPSS 0.02%Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs
CRITICAL9.1EPSS 0.03%Botan is a C++ cryptography library.