264762 matches found
FreeBSD : FreeBSD -- Buffer overflow in libalias RTSP handler (f5dd96dd-74e1-11f1-958d-bc241121aa0a)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f5dd96dd-74e1-11f1-958d-bc241121aa0a advisory. The RTSP handler in libalias rewrote outgoing packets into a fixed-length stack buffer without checking...
RockyLinux 9 : giflib (RLSA-2026:33501)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:33501 advisory. giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension CVE-2026-26740 Tenable has extracted the preceding description block directly from th...
CentOS 9 : libgcrypt-1.10.0-12.el9
The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libgcrypt-1.10.0-12.el9 build changelog. - Denial of Service and buffer overflow via crafted ECDH ciphertext CVE-2026-41989 Note that Nessus has not tested for this issue but has instea...
ALSA-2026:34155 Moderate: rrdtool security update
The round robin database RRD system stores and displays time-series data, such as network bandwidth, machine-room temperature, and server load average. RRDtool is a high performance data logging and graphing utility, which can be easily integrated with shell scripts, or used to create application...
RockyLinux 8 : glibc (RLSA-2026:33126)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:33126 advisory. glibc: glibc: Heap Buffer Overflow in scanf with %mc format specifier and large width CVE-2026-5450 Tenable has extracted the preceding description block directl...
ALSA-2026:34109 Important: httpd security, bug fix, and enhancement update
The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: incomplete fix for CVE-2023-38709 CVE-2024-42516 httpd: NULL pointer dereference via specially crafted request CVE-2026-29169 httpd: Apache HTTP Server: Heap-based Buffer...
RHEL 9 : giflib (RHSA-2026:33501)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:33501 advisory. giflib is a library for reading and writing gif images. Security Fixes: giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension...
PT-2026-55149
Summary A memory-safety vulnerability in Open Babel's CSR parser allowed an out-of-bounds write when reading a crafted input file. Details The flaw was in the PadString helper used to handle the CSR title field. A title longer than the fixed destination buffer caused the parser to write past the...
Oracle Linux 9 : glibc (ELSA-2026-33226)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-33226 advisory. - CVE-2026-5450: Fix buffer overflow in scanf RHEL-172710 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...
AlmaLinux 9 : giflib (ALSA-2026:33501)
The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:33501 advisory. giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension CVE-2026-26740 Tenable has extracted the preceding description block directly from the...
RHEL 8 : postgresql:12 (RHSA-2026:34043)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:34043 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Operating system accou...
RockyLinux 8 : giflib (RLSA-2026:33503)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:33503 advisory. giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension CVE-2026-26740 Tenable has extracted the preceding description block directly from th...
The vulnerability of the xmlHTMLPrintFileContext() function in the xmllint component of the Libxml2 library allows a attacker to disclose confidential information or enhance their privileges.
The vulnerability of the xmlHTMLPrintFileContext function in the xmllint component of the Libxml2 library is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow an attacker to disclose confidential information or gain elevated privileges...
RHEL 8 : postgresql:12 (RHSA-2026:34362)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:34362 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL: Operating system accou...
GeoVision GeoWebPlayer Websocket Server connectInfo handler stack-based buffer overflow vulnerabilities
Summary Multiple exploitable stack-based buffer overflow vulnerabilities exist in the Websocket Server connectInfo handler functionality of GeoWebPlayer versions: 1.1.1.0. A specially crafted websocket message can lead to a arbitrary code execution. An attacker can stage a malicious webpage to...
giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension
A flaw was found in giflib. A remote attacker can exploit a buffer overflow vulnerability in the EGifGCBToExtension function by providing a specially crafted Graphics Control Extension GCE block. This allows overwriting an existing GCE block without proper size validation, leading to a denial of...
Important: Red Hat Security Advisory: giflib security update
An update for giflib is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
CVE-2026-52198
Buffer Overflow vulnerability in UTT nv518G nv518GV3v3.2.7-210919-161313 allows a remote attacker to cause a denial of service via the gohead/sub425994 component...