VulniPulse uses Google Ads measurement to understand visits from advertisements and campaign performance. It runs cookie-free until you choose — accepting enables cookies for more accurate attribution. Rejecting keeps it cookie-free and never limits the site.
See exactly what is measuredComplete feed
4900 advisories across 32 monitored vendors.
Android app · Google Play
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Use after free in Forms. Red Hat rates this important (CVSS 9.6). Weakness: CWE-825. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
Use after free in Dawn. Red Hat rates this important (CVSS 9). Weakness: CWE-825. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
Use after free in Video. Red Hat rates this important (CVSS 9). Weakness: CWE-825. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
Use after free in Codecs. Red Hat rates this important (CVSS 9.6). Weakness: CWE-825. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
Use after free in Graphite. Red Hat rates this important (CVSS 9). Weakness: CWE-825. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
Use after free in Permissions. Red Hat rates this important (CVSS 9.6). Weakness: CWE-825. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
Denial of Service via decompression bomb in FITS image processing. Red Hat rates this important (CVSS 7.5). Weakness: CWE-409. Affected package(s): ansible-automation-platform, rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9:1778263054, rhelai3/bootc-rocm-rhel9:1778666124, rhaiis/vllm-rocm-rhel9:1778244531, rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9:1778677734, rhaiis/vllm-cuda-rhel9:1778274666. Resolved in Red Hat advisory RHSA-2026:23361 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Ansible Automation Platform 2.5 for RHEL 9; Red Hat Ansible Automation Platform 2.6 for RHEL 9; Red Hat Satellite 6.16 for RHEL 8; and 18 more.
command injection via malicious Perforce source reference/url. Red Hat rates this important (CVSS 8.8). Weakness: CWE-78. Affected package(s): composer-main. Resolved in Red Hat advisory RHSA-2026:8165 — update the affected packages (`sudo dnf update`). Affected product named by the advisory: Red Hat Hardened Images.
command injection via malicious Perforce repository definition. Red Hat rates this important (CVSS 7.8). Weakness: CWE-78. Affected package(s): composer-main. Resolved in Red Hat advisory RHSA-2026:8165 — update the affected packages (`sudo dnf update`). Affected product named by the advisory: Red Hat Hardened Images.
sensitive COS SecretKey exposed in plaintext via configuration API due to missing type protection. Red Hat rates this important (CVSS 7.5). Weakness: CWE-201. Affected package(s): multicluster-globalhub/multicluster-globalhub-grafana-rhel9:1779925273. Resolved in Red Hat advisory RHSA-2026:24503 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Advanced Cluster Management for Kubernetes 2; Red Hat Ceph Storage 6.
Arbitrary code execution or denial of service via buffer overflow in GIF image processing. Red Hat rates this important (CVSS 7.3). Weakness: CWE-120. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected products named by the advisory: Red Hat Enterprise Linux 6; Red Hat Enterprise Linux 8.
@fastify/reply-from: @fastify/http-proxy: Fastify Reply From and HTTP Proxy: Security bypass via Connection header manipulation. Red Hat rates this important (CVSS 7.4). Weakness: CWE-444. Affected package(s): devspaces/dashboard-rhel9:1776795511. Resolved in Red Hat advisory RHSA-2026:10175 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat OpenShift Dev Spaces 3.27; Red Hat OpenShift AI (RHOAI).
unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. Affected package(s): eap8-bouncycastle, bcpg-jdk18on, bcpg-fips, bcpg-jdk15on. Resolved in Red Hat advisory RHSA-2026:18054 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8; Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9; OpenShift Developer Tools and Services; Red Hat AMQ Clients; and 6 more.
PKIX draft CompositeVerifier accepts empty signature sequence as valid. Red Hat rates this important (CVSS 7.5). Weakness: CWE-347. Affected package(s): eap8-bouncycastle, devspaces/openvsx-rhel9:1779528224, eap8-guava-failureaccess, eap8-activemq-artemis, eap8-netty-transport-native-epoll, eap8-reactivex-rxjava. Resolved in Red Hat advisory RHSA-2026:14276 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8; Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9; Red Hat OpenShift Dev Spaces 3.28; OpenShift Developer Tools and Services; and 9 more.
private key leakage via non-constant time comparisons. Red Hat rates this important (CVSS 7.5). Weakness: CWE-385. Affected package(s): eap8-bouncycastle, bcprov-jdk12, eap7-bouncycastle. Resolved in Red Hat advisory RHSA-2026:18054 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7; Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8; Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9; Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8; and 2 more.
GOSTCTR implementation unable to process more than 255 blocks correctly. Red Hat rates this important (CVSS 7.5). Weakness: CWE-327. Affected package(s): bcprov-jdk15to18, eap8-bouncycastle, devspaces/openvsx-rhel9:1779528224, bcprov-ext-jdk15on, bcprov-ext-jdk18on, devspaces/pluginregistry-rhel9:1779359423. Resolved in Red Hat advisory RHSA-2026:14276 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat build of Apache Camel 4.18.1 for Spring Boot 3.5.14; Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8; Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9; Red Hat OpenShift AI 2.25; and 14 more.
Schema validation bypass via malformed Content-Type header. Red Hat rates this important (CVSS 7.5). Weakness: CWE-1289. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
Use after free in XR. Red Hat rates this important (CVSS 8.8). Weakness: CWE-125. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
Use after free in CSS. Red Hat rates this important (CVSS 8.8). Weakness: CWE-825. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
Out of bounds write in GPU. Red Hat rates this important (CVSS 8). Weakness: CWE-787. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.