CVE Vulnerabilities - 6 March 2026

3208 vulnerabilities published on 6 March 2026

Severity:

Vim text editor's NetBeans integration has a buffer overflow flaw

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor &apos;Vi&apos;, with a more complete feature set. V...

Vim's NetBeans Integration Allows Malicious Servers to Crash the Program

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor &apos;Vi&apos;, with a more complete feature set. V...

Vim's NetBeans integration allows malicious servers to crash the editor

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor &apos;Vi&apos;, with a more complete feature set. V...

Vim Text Editor May Crash or Be Exploited by Malicious Servers

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor &apos;Vi&apos;, with a more complete feature set. V...

Vim's NetBeans Integration Allows Malicious Server to Crash Editor

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor &apos;Vi&apos;, with a more complete feature set. V...

PostgreSQL Client Software Exposes Server Memory

PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you&a...

PostgreSQL Client Software May Leak Memory or Execute Malicious Code

PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you&a...

PostgreSQL Update Required to Prevent Data Exposure and Code Execution

PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you&a...

PostgreSQL Client Software Can Leak Sensitive Data

PostgreSQL is an advanced Object-Relational database management system (DBMS). The base postgresql package contains the client programs that you&a...

libssh: Remote code execution possible through malicious SSH connections

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the clie...

HSQLDB: Malicious database file can write to arbitrary locations

HSQLdb is a relational database engine written in JavaTM , with a JDBC driver, supporting a subset of ANSI-92 SQL. It offers a small (about 100k), fas...

HSQLDB: Unrestricted File Writing in Libreoffice Database

HSQLdb is a relational database engine written in JavaTM , with a JDBC driver, supporting a subset of ANSI-92 SQL. It offers a small (about 100k), fas...

Libreoffice HSQLdb Data Exposure

HSQLdb is a relational database engine written in JavaTM , with a JDBC driver, supporting a subset of ANSI-92 SQL. It offers a small (about 100k), fas...

Libreoffice Database Security Risk: File Writing Vulnerability

HSQLdb is a relational database engine written in JavaTM , with a JDBC driver, supporting a subset of ANSI-92 SQL. It offers a small (about 100k), fas...

HSQLDB: Malicious Database Files Can Write to Unintended Locations

HSQLdb is a relational database engine written in JavaTM , with a JDBC driver, supporting a subset of ANSI-92 SQL. It offers a small (about 100k), fas...

Root npm Package @rootio/tar: Uncontrolled Resource Consumption

ROOT-APP-NPM-CVE-2026-23950

Root has patched CVE-2026-23950 in the @rootio/tar package for Root:npm. Multiple fixed versions available....

Root Tar Package Allows Unauthorized File Access

ROOT-APP-NPM-CVE-2026-24842

Root has patched CVE-2026-24842 in the @rootio/tar package for Root:npm. Multiple fixed versions available....

Root Package Tar: Unpatched Versions Leave System to Root Access

ROOT-APP-NPM-GHSA-qffp-2rhf-9h96

Root has patched GHSA-qffp-2rhf-9h96 in the @rootio/tar package for Root:npm. Multiple fixed versions available....

Root Tar Package Allows Unauthorized File Access

ROOT-APP-NPM-CVE-2026-23745

Root has patched CVE-2026-23745 in the @rootio/tar package for Root:npm. Multiple fixed versions available....

Potential Denial of Service in gRPC HPACK Parser

SUSE-SU-2026:0840-1

This update for grpc fixes the following issue: - CVE-2023-33953: unbounded memory and CPU consumption in the HPACK parser leads to remote DoS (bsc#1...

Minimatch Package Allows Unauthorized File Access

ROOT-APP-NPM-CVE-2026-27904

Root has patched CVE-2026-27904 in the @rootio/minimatch package for Root:npm. Multiple fixed versions available....

rootio-freetype: Unauthorized data access via crafted font file

ROOT-OS-DEBIAN-12-CVE-2026-23865

Root has patched CVE-2026-23865 in the rootio-freetype package for Root:Debian:12. Multiple fixed versions available....

rootio-mariadb-10.5: Unauthorized access to database possible through root account

ROOT-OS-DEBIAN-11-CVE-2025-13699

Root has patched CVE-2025-13699 in the rootio-mariadb-10.5 package for Root:Debian:11. Multiple fixed versions available....

Rootio-Imagemagick: Unpatched Image Files Can Be Tricked into Running Malicious Code

ROOT-OS-DEBIAN-12-CVE-2026-25794

Root has patched CVE-2026-25794 in the rootio-imagemagick package for Root:Debian:12. Multiple fixed versions available....

Rootio Imagemagick: Unpatched Versions Leave Systems Open to Attack

ROOT-OS-DEBIAN-12-CVE-2026-25796

Root has patched CVE-2026-25796 in the rootio-imagemagick package for Root:Debian:12. Multiple fixed versions available....

5 Mar 2026 All days 7 Mar 2026