174265 matches found
CLEANSTART-2026-DU50548 malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop
CVE-2026-39830 affects multiple packages. A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. See references for individual vulnerability details...
PT-2026-108039
FFmpeg through 9.0.2 contains a stack exhaustion vulnerability in av encryption init info free in libavutil/encryption info.c, which recursively frees AVEncryptionInitInfo linked lists built by the MOV demuxer's mov read pssh. Attackers can supply a crafted MP4 file with tens of thousands of smal...
PT-2026-108166
The Affinity by Canva application before 3.3.1 October 2026 release did not perform adequate bounds checking when parsing raster image data in Affinity document files, leading to an out-of-bounds read and the dereference of an untrusted pointer. A threat actor could craft an Affinity document tha...
Rocky Linux 8 [CIQ] Security Update: libpcap / libpcap-debuginfo / libpcap-debugsource / libpcap-devel (crlsa-2026_76045)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202676045 advisory. libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access CVE-2026-0799 Tenable has extracted the preceding description block...
Rocky Linux 8 [CIQ] Security Update: freerdp / freerdp-debuginfo / freerdp-debugsource / freerdp-devel / etc Multiple Vulnerabilities (crlsa-2026_76747)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202676747 advisory. FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command CVE-2026-91954 FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in...
RHEL 9 : freerdp (RHSA-2026:76755)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:76755 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...
Linux Distros Unpatched Vulnerability : CVE-2026-98372
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfrm: iptfs: fix stack OOB read in iptfsskbresetfragwalk iptfsskbresetfragwalk advances to the fragment containing @offset with an unbounded loop: while offset ...
EulerOS 2.0 SP15 : kernel (EulerOS-SA-2026-3982)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : netdevsim: zero initialize struct iphdr in dummy skbuffCVE-2026-52985 drm/amd/display: Wrap DCN32 phantom-plane allocation in...
ProFTPD Improper Access Control Vulnerability
ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands...
EulerOS 2.0 SP15 : libssh2 (EulerOS-SA-2026-3987)
According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation...
EulerOS 2.0 SP15 : libssh2 (EulerOS-SA-2026-3921)
According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation...
PT-2026-107805
An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When executing configuration viewing commands with search pattern filters, the utility fails to sanitize user-supplied search...
VulnCheck KEV: CVE-2015-3306
ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands...
RHEL 9 : perl-DBI (RHSA-2026:76760)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:76760 advisory. The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent...
ROS-20261008-73-0293
The vulnerability in the kernel-lt is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-107774
An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. Unauthenticated HTTP endpoints process specific URL query parameters without validating array index boundaries or performing numerical range checks. An unauthenticated remot...
PT-2026-108222
Name of the Vulnerable Software and Affected Versions IBM Security Verify Access versions 10.0 through 10.0.9.2 IBM Verify Identity Access versions 11.0 through 11.0.3 Description A heap-based out-of-bounds read can lead to a denial of service. A remote attacker can trigger a limited out-of-bound...
PT-2026-107993
Name of the Vulnerable Software and Affected Versions Dislocker versions prior to 0.7.4 Description A heap out-of-bounds read occurs in the get dataset and get next datum functions because dataset and datum sizes are not validated against the metadata allocation. An attacker can create a BitLocke...
PT-2026-108025
Name of the Vulnerable Software and Affected Versions OpenShift 4 affected versions not specified Description The insights-operator-gather ClusterRole grants the operator service account read access to secrets in the core API group without namespace or resourceNames restrictions. This allows the...
PT-2026-108173
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description A heap-based out-of-bounds read exists in the TDS7 LOGIN7 protocol parser. A remote attacker can exploit this by sending a specially crafted TDS LOGIN7 packet that contains...