263404 matches found
Medium: opensc
Issue Overview: A flaw has been found in OpenSC up to 0.26.1. This affects the function testkpgencertwrite of the file src/tools/pkcs11-tool.c of the component pkcs11-tool Key Generation Module. This manipulation causes buffer overflow. The attack is possible to be carried out remotely. The...
RHEL 9 : xorg-x11-server-Xwayland (RHSA-2026:36633)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:36633 advisory. Xwayland is an X server for running X clients under Wayland. Security Fixes: xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server:...
Amazon Linux 2 : opensc, --advisory ALAS2-2026-3492 (ALAS-2026-3492)
The version of opensc installed on the remote host is prior to 0.19.0-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3492 advisory. A flaw has been found in OpenSC up to 0.26.1. This affects the function testkpgencertwrite of the file src/tools/pkcs11-tool.c of t...
The vulnerability of the dtv5100_i2c_msg() function in the drivers/media/usb/dvb-usb/dtv5100.c file of the Linux operating system’s multimedia device driver framework allows a hacker to gain access to protected information or cause service failures.
The vulnerability of the dtv5100i2cmsg function in the drivers/media/usb/dvb-usb/dtv5100.c file of the Linux operating system’s multimedia device driver library is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this...
The vulnerability of the NewXMLTree method in the ImageMagick console-based graphics editor allows a hacker to trigger a service failure.
The vulnerability of the NewXMLTree method in the ImageMagick console-based graphics editor is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the WriteUHDRImage() function in the ImageMagick console graphics editor’s coders/uhdr.c file allows a hacker to cause a service failure.
The vulnerability of the WriteUHDRImage function in the ImageMagick console graphics editor’s coders/uhdr.c file is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
ALSA-2026:36734 Low: libxml2 security update
The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling CVE-2025-6170 For more details about the security issues, including the impact, a CVSS score,...
RockyLinux 10 : freerdp (RLSA-2026:36203)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:36203 advisory. freerdp: FreeRDP: Remote code execution via heap-buffer-overflow in gdiCacheToSurface CVE-2026-40033 freerdp: FreeRDP: Arbitrary code execution or deni...
Palo Alto Networks PAN-OS 10.2.x / 11.1.x / 11.2.x / 12.1.x Vulnerability
The version of Palo Alto Networks PAN-OS running on the remote host is a vulnerable version of 10.2.x, 11.1.x, 11.2.x, or 12.1.x. It is, therefore, affected by a vulnerability. Multiple buffer overflow vulnerabilities in the User-ID Terminal Server Agent TSA component of Palo Alto Networks PAN-OS...
RHEL 8 : glibc (RHSA-2026:36643)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:36643 advisory. The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cach...
The vulnerability of the UHDR encoder in the console-based image editing software ImageMagick allows a hacker to trigger a service failure.
The vulnerability of the UHDR encoder in the console-based image editing software ImageMagick is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
RockyLinux 8 : freeipmi (RLSA-2026:36307)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:36307 advisory. freeipmi: FreeIPMI: Denial of service via buffer overflow in ipmi-oem client CVE-2026-50031 Tenable has extracted the preceding description block directly from t...
Linux Distros Unpatched Vulnerability : CVE-2026-56002
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap bufferflow in pcfReadFont due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client to execute code withi...
Important: gstreamer1-plugins-good security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer1-plugins-good: GStreamer: Heap buffer overflo...
ALSA-2026:36749 Important: gstreamer1-plugins-bad-free security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package contains a collection of plug-ins for GStreamer. Security Fixes: gstreamer1-plugins-bad-free: GStreamer: Denial of service via AV1 tilelistobu parser byte/bit...
ROS-20260708-73-0034
The vulnerability of the RESTORE command in the Redis database management system is related to buffer overflows in the dynamic memory. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
ROS-20260708-73-0039
The vulnerability in glibc is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2026-49033
The application contains a stack-based buffer overflow vulnerability that can be exploited by an attacker to execute arbitrary code...
CVE-2026-42953
The application contains an out-of-bounds write vulnerability that can be exploited by an attacker to cause the program to write data past the end of an allocated memory buffer. This can lead to arbitrary code execution...
