https://db.gcve.eu Latest vulnerabilities published by the CNAs operating under the redhat root of the CVE Program. http://www.rssboard.org/rss-specification python-feedgen en Thu, 27 Aug 2026 23:19:17 +0000 https://db.gcve.eu/vuln/cve-2026-18374 Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the `fopen` function in the GNU C Library version 2.45 or earlier may result in a heap buffer overflow when the mode string input to the function is attacker controlled. This usage pattern is not seen in applications in common GNU/Linux distributions and applications that process user-supplied values for `ccs` should not pass them through without validation. Passing an effectively empty string to the `,ccs=` syntax extension of the mode argument in the `fopen` function in the GNU C Library version 2.45 or earlier may result in a heap buffer overflow when the mode string input to the function is attacker controlled. This usage pattern is not seen in applications in common GNU/Linux distributions and applications that process user-supplied values for `ccs` should not pass them through without validation. https://db.gcve.eu/vuln/cve-2026-18374 Thu, 27 Aug 2026 19:20:40 +0000 https://db.gcve.eu/vuln/cve-2026-81893 Gdk-pixbuf: gdk-pixbuf: invalid write in jpeg icc profile parser on error recovery Gdk-pixbuf: gdk-pixbuf: invalid write in jpeg icc profile parser on error recovery https://db.gcve.eu/vuln/cve-2026-81893 Thu, 27 Aug 2026 18:34:03 +0000 https://db.gcve.eu/vuln/cve-2026-5680 Undertow-core: undertow: denial of service via websocket permessage-deflate processing Undertow-core: undertow: denial of service via websocket permessage-deflate processing https://db.gcve.eu/vuln/cve-2026-5680 Thu, 27 Aug 2026 16:25:29 +0000 https://db.gcve.eu/vuln/cve-2026-78002 Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function https://db.gcve.eu/vuln/cve-2026-78002 Thu, 27 Aug 2026 16:12:59 +0000 https://db.gcve.eu/vuln/cve-2026-81668 Rubygem-katello: cross-tenant content view filter rule access and modification via unauthorized parent filter lookup Rubygem-katello: cross-tenant content view filter rule access and modification via unauthorized parent filter lookup https://db.gcve.eu/vuln/cve-2026-81668 Thu, 27 Aug 2026 11:15:42 +0000 https://db.gcve.eu/vuln/cve-2026-81658 Foreman: cross-tenant disclosure of template revisions via unauthorized audit lookup Foreman: cross-tenant disclosure of template revisions via unauthorized audit lookup https://db.gcve.eu/vuln/cve-2026-81658 Thu, 27 Aug 2026 10:22:08 +0000 https://db.gcve.eu/vuln/cve-2026-80158 Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listings Ansible-collection-community-general: community.general: ipa_getkeytab does not set no_log on the bind_pw parameter, disclosing the ipa bind password in logs and process listings https://db.gcve.eu/vuln/cve-2026-80158 Wed, 26 Aug 2026 22:06:07 +0000 https://db.gcve.eu/vuln/cve-2026-77652 Dia: dia: heap buffer overflow in wpg colormap parser via out-of-bounds palette index Dia: dia: heap buffer overflow in wpg colormap parser via out-of-bounds palette index https://db.gcve.eu/vuln/cve-2026-77652 Wed, 26 Aug 2026 19:21:39 +0000 https://db.gcve.eu/vuln/cve-2026-79902 Gimp: stack vla size underflow denial of service in seattle Gimp: stack vla size underflow denial of service in seattle https://db.gcve.eu/vuln/cve-2026-79902 Wed, 26 Aug 2026 13:34:24 +0000 https://db.gcve.eu/vuln/cve-2026-77658 Dia: dia: stack buffer overflow in bus object via unvalidated handle count in project files Dia: dia: stack buffer overflow in bus object via unvalidated handle count in project files https://db.gcve.eu/vuln/cve-2026-77658 Wed, 26 Aug 2026 12:10:07 +0000