VulniPulse uses Google Ads measurement to understand visits from advertisements and campaign performance. It runs cookie-free until you choose — accepting enables cookies for more accurate attribution. Rejecting keeps it cookie-free and never limits the site.
See exactly what is measuredComplete feed
4209 advisories across 32 monitored vendors.
Arbitrary Code Execution or Denial of Service via Signed Integer Overflow. Red Hat rates this moderate (CVSS 6.2). Weakness: CWE-190. Affected package(s): jq-main. Resolved in Red Hat advisory RHSA-2026:29986 — update the affected packages (`sudo dnf update`).
embedded NUL truncates top-level jq programs loaded with -f. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-158. Affected package(s): jq-main. Resolved in Red Hat advisory RHSA-2026:29986 — update the affected packages (`sudo dnf update`).
stack overflow via unbounded recursion in jv_contains. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-674. Affected package(s): jq-main. Resolved in Red Hat advisory RHSA-2026:29986 — update the affected packages (`sudo dnf update`).
signed-int overflow in stack_reallocate. Red Hat rates this moderate (CVSS 5.5). Weakness: CWE-190. Affected package(s): jq-main. Resolved in Red Hat advisory RHSA-2026:29986 — update the affected packages (`sudo dnf update`).
XML::LibXML: Denial of Service via truncated UTF-8 in XML node names. Red Hat rates this important (CVSS 7.5). Weakness: CWE-125. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released.
denial of service via crafted XML input. Red Hat rates this important (CVSS 7.5). Weakness: CWE-407. Affected package(s): expat, rhui5/haproxy-rhel9:1781525671, rhui5/installer-rhel9:1781525693, rhui5/cds-rhel9:1781525684, libexpat, discovery/discovery-ui-rhel9:1782166952. Resolved in Red Hat advisory RHSA-2026:22715 — update the affected packages (`sudo dnf update`).
denial of service via DOMNode::C14N(). Red Hat rates this important (CVSS 7.5). Weakness: CWE-835. Affected package(s): php8.4. Resolved in Red Hat advisory RHSA-2026:22649 — update the affected packages (`sudo dnf update`).
global buffer over-read in mb_convert_encoding() with attacker-supplied encoding. Red Hat rates this important (CVSS 8.2). Weakness: CWE-125. Affected package(s): php8.4. Resolved in Red Hat advisory RHSA-2026:22649 — update the affected packages (`sudo dnf update`).
PHP SOAP extension: Remote Code Execution via use-after-free vulnerability. Red Hat rates this important (CVSS 7.7). Weakness: CWE-825. Affected package(s): php, php:7.4. Resolved in Red Hat advisory RHSA-2026:33449 — update the affected packages (`sudo dnf update`).
NULL pointer dereference in SOAP apache:Map decoder with missing <value>. Red Hat rates this important (CVSS 7.5). Weakness: CWE-476. Affected package(s): php, php8.4, php:8.2, php:7.4, php:8.3. Resolved in Red Hat advisory RHSA-2026:22649 — update the affected packages (`sudo dnf update`).
SQL injection in pdo_firebird via NUL bytes in quoted strings. Red Hat rates this important (CVSS 8.1). Weakness: CWE-89. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released.
signed integer overflow in metaphone(). Red Hat rates this important (CVSS 7.5). Weakness: CWE-190. Affected package(s): php, php8.4, php:8.2, php:7.4, php:8.3. Resolved in Red Hat advisory RHSA-2026:22649 — update the affected packages (`sudo dnf update`).
Denial of Service via improper handling of signed characters in ctype functions. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-839. Affected package(s): php, php8.4, php:8.2, php:7.4, php:8.3, php-main. Resolved in Red Hat advisory RHSA-2026:22649 — update the affected packages (`sudo dnf update`).
NULL pointer dereference in php_mb_check_encoding() via mb_ereg_search_init(). Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-476. Affected package(s): php. Resolved in Red Hat advisory RHSA-2026:33449 — update the affected packages (`sudo dnf update`).
Memory corruption and information disclosure via incorrect persistence handling. Red Hat rates this moderate (CVSS 5.6). Weakness: CWE-825. Affected package(s): php, php:7.4. Resolved in Red Hat advisory RHSA-2026:33449 — update the affected packages (`sudo dnf update`).
Cross-Site Scripting vulnerability via improper URL sanitation. Red Hat rates this moderate (CVSS 5.4). Weakness: CWE-79. Affected package(s): php, php8.4, php:8.2, php:7.4, php:8.3, php-main. Resolved in Red Hat advisory RHSA-2026:22649 — update the affected packages (`sudo dnf update`).
Net::IMAP: IMAP Command Injection via Symbol Arguments. Red Hat rates this important (CVSS 7.1). Weakness: CWE-93. Affected package(s): ruby, ruby4.0, ruby:3.3, ruby:2.5, ruby:4.0. Resolved in Red Hat advisory RHSA-2026:33514 — update the affected packages (`sudo dnf update`).
Net::IMAP: Information disclosure via man-in-the-middle attack bypassing TLS. Red Hat rates this important (CVSS 7.4). Weakness: CWE-325. Affected package(s): ruby, ruby4, ruby4.0, ruby:3.3, ruby3, ruby:2.5. Resolved in Red Hat advisory RHSA-2026:33514 — update the affected packages (`sudo dnf update`).
Privilege escalation via ptrace when installed in setuid mode. Red Hat rates this important (CVSS 7). Weakness: CWE-269. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released.
Privilege escalation via security control bypass. Red Hat rates this important (CVSS 8.1). Weakness: CWE-863. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released.