HIGH8.2CVE-2026-52859Vim is an open source, command line text editor.
MEDIUM4.8CVE-2026-45446Issue summary: The implementations of AES-SIV (RFC 5297) and AES-GCM-SIV (RFC 8452) mishandle the authentication of AAD (Additional Authent…
MEDIUM5.9Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption.
LOW3.7Issue summary: The CMS_decrypt and PKCS7_decrypt functions are vulnerable to Bleichenbacher-style attack when an attacker is able to provid…
LOW3.7Issue summary: When EVP_PKEY_derive_set_peer() is called with a DHX (X9.42) peer key, the peer key is not properly checked for the subgroup…
MEDIUM5.9Issue summary: An attacker-controlled CMP (Certificate Management Protocol) server could trigger a NULL pointer dereference in a CMP client…
MEDIUM5.3Issue Summary: An error in the callback used to verify the certificate provided in a Root CA key update Certificate Management Protocol (CM…
MEDIUM5.0MariaDB: FILE privilege was not checked for subqueries in the FROM clause
MEDIUM4.37-Zip is a file archiver with a high compression ratio.
MEDIUM4.37-Zip is a file archiver with a high compression ratio.
MEDIUM6.57-Zip is a file archiver with a high compression ratio.
MEDIUM4.27-Zip is a file archiver with a high compression ratio.
MEDIUM6.57-Zip is a file archiver with a high compression ratio.
LOW3.17-Zip is a file archiver with a high compression ratio.
MEDIUM4.37-Zip is a file archiver with a high compression ratio.
MEDIUM6.5EPSS 0.07%A flaw was found in Samba’s vfs_worm module.
MEDIUM5.3EPSS 0.25%A flaw was found in gnutls.
MEDIUM5.3EPSS 0.07%Cargo incorrectly handled symlinks inside of crate tarballs downloaded from third-party registries, allowing a malicious crate to override…
MEDIUM6.5EPSS 0.03%Cargo between 1.68 and 1.96 incorrectly normalized the URLs of third-party registries using the sparse index protocol.
MEDIUM5.3EPSS 0.14%An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling, enabling a remote unauthenti…
MEDIUM5.9EPSS 0.04%Undefined behavior may result due to a race condition leading to a use-after-free violation.
MEDIUM5.3EPSS 0.02%BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack.
MEDIUM5.9EPSS 0.05%NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a locking inconsistency vulnerability that when certain conditions are met…