| | CVE-2026-40226 |  Red Hat | medium | 6.4 | 0.0%
| ✓ Fix | In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted op… | Apr 10, 2026 | Apr 10, 2026 |
| | CVE-2026-40227 | Red Hat | medium | 6.2 | 0.0%
| | A flaw was found in systemd. A local unprivileged user can exploit this vulnerability by making an I… | Apr 10, 2026 | Apr 10, 2026 |
| | CVE-2026-29043 | Red Hat | medium | 5.5 | 0.0%
| | HDF5 is software for managing data. In 1.14.1-2 and earlier, an attacker who can control an h5 file … | Apr 10, 2026 | Apr 10, 2026 |
| | CVE-2026-34477 | Red Hat | medium | 6.8 | 0.0%
| | A flaw was found in Apache Log4j Core. A network-based attacker can perform a man-in-the-middle (MIT… | Apr 10, 2026 | Apr 10, 2026 |
| | CVE-2026-34478 | Red Hat | medium | 5.8 | 0.0%
| | A flaw was found in Apache Log4j Core. This vulnerability allows for log injection through the use o… | Apr 10, 2026 | Apr 10, 2026 |
| | CVE-2026-34479 | Red Hat | medium | 5.3 | 0.1%
| | A flaw was found in the Apache Log4j 1-to-Log4j 2 bridge. The Log4j1XmlLayout component fails to pro… | Apr 10, 2026 | Apr 10, 2026 |
| | CVE-2026-34480 | Red Hat | medium | 5.3 | 0.0%
| | A flaw was found in Apache Log4j Core. The XmlLayout component, responsible for formatting log messa… | Apr 10, 2026 | Apr 10, 2026 |
| | CVE-2026-40023 | Red Hat | medium | 5.3 | 0.3%
| | A flaw was found in Apache Log4cxx. An attacker who can influence logged data can exploit this by in… | Apr 10, 2026 | Apr 10, 2026 |
| | CVE-2026-40228 | Red Hat | low | 2.9 | 0.0%
| ✓ Fix | In systemd 259, systemd-journald can send ANSI escape sequences to the terminals of arbitrary users … | Apr 10, 2026 | Apr 10, 2026 |
| | CVE-2026-34481 |  Apache | high | 7.5 | 0.6%
| | Apache Log4j's JsonTemplateLayout https://logging.apache.org/log4j/2.x/manual/json-template-layout.… | Apr 10, 2026 | Jul 11, 2026 |
| | CVE-2026-40021 | Apache | medium | 5.3 | 0.2%
| | Apache Log4net's XmlLayout https://logging.apache.org/log4net/manual/configuration/layouts.html#lay… | Apr 10, 2026 | Apr 22, 2026 |
| | CVE-2026-5483 | Red Hat | high | 8.5 | 0.1%
| ✓ Fix | A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the `odh-dashboard`… | Apr 10, 2026 | Apr 10, 2026 |
| | CVE-2026-1502 | Red Hat | medium | 4.5 | 0.0%
| ✓ Fix | CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host. | Apr 10, 2026 | Apr 10, 2026 |
| | CVE-2026-3446 | Red Hat | medium | 5.3 | 0.0%
| ✓ Fix | When calling base64.b64decode() or related functions the decoding process would stop after encounter… | Apr 10, 2026 | Apr 10, 2026 |
| | CVE-2026-40175 | Red Hat | high | 9.0 | 0.1%
| ✓ Fix | Axios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0 and 0.3.1… | Apr 10, 2026 | Apr 10, 2026 |
| | CVE-2026-33119 |  Microsoft | medium | 5.4 | 0.0%
| | User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) all… | Apr 10, 2026 | Apr 24, 2026 |
| | CVE-2026-33118 | Microsoft | medium | 4.3 | 0.6%
| | User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) all… | Apr 10, 2026 | Jun 19, 2026 |
| | CVE-2026-4150 | Red Hat | high | 7.8 | 0.0%
| ✓ Fix | GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allow… | Apr 11, 2026 | Apr 11, 2026 |
| | CVE-2026-4151 | Red Hat | high | 7.8 | 0.0%
| ✓ Fix | GIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allow… | Apr 11, 2026 | Apr 11, 2026 |
| | CVE-2026-4152 | Red Hat | high | 7.8 | 0.0%
| ✓ Fix | GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerabi… | Apr 11, 2026 | Apr 11, 2026 |
| | CVE-2026-4153 | Red Hat | high | 7.8 | 0.1%
| ✓ Fix | GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerabi… | Apr 11, 2026 | Apr 11, 2026 |
| | CVE-2026-4154 | Red Hat | high | 7.8 | 0.1%
| ✓ Fix | GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allow… | Apr 11, 2026 | Apr 11, 2026 |
| | CVE-2026-40354 | Red Hat | medium | 6.1 | 0.0%
| | Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash an… | Apr 11, 2026 | Apr 11, 2026 |
| | CVE-2026-32146 | Red Hat | high | 8.6 | 0.0%
| | Improper path validation vulnerability in the Gleam compiler's handling of git dependencies allows a… | Apr 11, 2026 | Apr 11, 2026 |
| | CVE-2026-31413 | Red Hat | medium | — | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix unsound scalar forking … | Apr 12, 2026 | Apr 12, 2026 |
| | CVE-2019-25695 | Red Hat | high | 8.4 | 0.0%
| | R 3.4.4 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary co… | Apr 12, 2026 | Apr 12, 2026 |
| | CVE-2026-40385 | Red Hat | medium | 4.0 | 0.0%
| ✓ Fix | In libexif through 0.6.25, an unsigned 32bit integer overflow in Nikon MakerNote handling could be u… | Apr 12, 2026 | Apr 12, 2026 |
| | CVE-2026-40386 | Red Hat | medium | 4.0 | 0.0%
| ✓ Fix | In libexif through 0.6.25, an integer underflow in size checking for Fuji and Olympus MakerNote deco… | Apr 12, 2026 | Apr 12, 2026 |
| | CVE-2026-40394 | Red Hat | medium | 5.9 | 0.1%
| | Varnish Cache 9 before 9.0.1 and Varnish Enterprise before 6.0.16r11 allows a "workspace overflow" d… | Apr 12, 2026 | Apr 12, 2026 |
| | CVE-2026-40395 | Red Hat | medium | 4.0 | 0.1%
| | Varnish Enterprise before 6.0.16r12 allows a "workspace overflow" denial of service (daemon panic) f… | Apr 12, 2026 | Apr 12, 2026 |
| | CVE-2026-40396 | Red Hat | medium | 5.9 | 0.0%
| | A flaw was found in Varnish Cache. A malicious client can exploit a 'workspace overflow' vulnerabili… | Apr 12, 2026 | Apr 12, 2026 |
| | CVE-2026-6842 | Red Hat | low | 2.5 | 0.0%
| | A flaw was found in nano. In environments with permissive umask settings, a local attacker can explo… | Apr 13, 2026 | Apr 13, 2026 |
| | CVE-2026-6843 | Red Hat | medium | 5.5 | 0.0%
| | A flaw was found in nano. A local user could exploit a format string vulnerability in the `statuslin… | Apr 13, 2026 | Apr 13, 2026 |
| | CVE-2026-6844 | Red Hat | medium | 5.5 | 0.0%
| | A flaw was found in the `readelf` utility of the binutils package. A local attacker could exploit tw… | Apr 13, 2026 | Apr 13, 2026 |
| | CVE-2026-6845 | Red Hat | medium | 5.0 | 0.0%
| | A flaw was found in binutils, specifically within the `readelf` utility. This vulnerability allows a… | Apr 13, 2026 | Apr 13, 2026 |
| | CVE-2026-6856 | Red Hat | low | 3.1 | — | | No description is available for this CVE. | Apr 13, 2026 | Apr 13, 2026 |
| | CVE-2026-31418 | Red Hat | medium | — | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
netfilter: ipset: drop logically… | Apr 13, 2026 | Apr 13, 2026 |
| | CVE-2026-31414 | Red Hat | medium | 5.8 | 0.1%
| | In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_conntrack_expect: … | Apr 13, 2026 | Apr 13, 2026 |
| | CVE-2026-31419 | Red Hat | high | 7.0 | 0.0%
| ✓ Fix | In the Linux kernel, the following vulnerability has been resolved:
net: bonding: fix use-after-free… | Apr 13, 2026 | Apr 13, 2026 |
| | CVE-2026-31416 | Red Hat | medium | 5.5 | 0.0%
| | In the Linux kernel, the following vulnerability has been resolved:
netfilter: nfnetlink_log: accoun… | Apr 13, 2026 | Apr 13, 2026 |
| | CVE-2026-5367 | Red Hat | high | 8.6 | 0.0%
| ✓ Fix | A flaw was found in OVN (Open Virtual Network). A remote attacker, by sending crafted DHCPv6 (Dynami… | Apr 13, 2026 | Apr 13, 2026 |
| | CVE-2026-33555 | Red Hat | medium | 4.0 | — | | A flaw was found in HAProxy. A remote attacker could exploit this vulnerability by sending a special… | Apr 13, 2026 | Apr 13, 2026 |
| | CVE-2026-30998 | Red Hat | medium | 5.3 | — | | A flaw was found in FFmpeg. An improper resource deallocation and closure vulnerability in the `tool… | Apr 13, 2026 | Apr 13, 2026 |
| | CVE-2026-30999 | Red Hat | medium | 5.3 | — | | A flaw was found in FFmpeg. A remote attacker could exploit a heap buffer overflow vulnerability in … | Apr 13, 2026 | Apr 13, 2026 |
| | CVE-2026-30997 | Red Hat | medium | 5.9 | — | | A flaw was found in FFmpeg. An attacker can exploit an out-of-bounds read vulnerability within the `… | Apr 13, 2026 | Apr 13, 2026 |
| | CVE-2026-31427 | Red Hat | medium | 5.8 | — | | A flaw was found in the Linux kernel's netfilter subsystem, specifically within the nf_conntrack_sip… | Apr 13, 2026 | Apr 13, 2026 |
| | CVE-2026-31428 | Red Hat | low | 5.5 | — | | A flaw was found in the Linux kernel's netfilter component. When manually constructing the NFULA_PAY… | Apr 13, 2026 | Apr 13, 2026 |
| | CVE-2026-31415 | Red Hat | medium | 5.5 | — | | A flaw was found in the Linux kernel. A local attacker can exploit an integer overflow vulnerability… | Apr 13, 2026 | Apr 13, 2026 |
| | CVE-2026-31423 | Red Hat | medium | 5.5 | — | | A flaw was found in the Linux kernel's Hierarchical Fair Service Curve (HFSC) network scheduler. Whe… | Apr 13, 2026 | Apr 13, 2026 |
| | CVE-2026-31420 | Red Hat | medium | — | — | | A flaw was found in the Linux kernel's bridge subsystem, specifically within the Multiple Registrati… | Apr 13, 2026 | Apr 13, 2026 |