174352 matches found
MiracleLinux 8 : freerdp-2.11.7-14.el8_10 (AXSA:2026-1998:31)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1998:31 advisory. FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command CVE-2026-91954 FreeRDP: FreeRDP: Remote code execution via heap buffer overflow...
MiracleLinux 9 : kernel-5.14.0-687.44.1.el9_8 (AXSA:2026-1991:92)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1991:92 advisory. kernel: smc: Fix use-after-free in pnetfindbasendev CVE-2025-40064 kernel: Linux kernel: Denial of Service due to memory leak in tpm2loadcmd...
EulerOS 2.0 SP15 : glib2 (EulerOS-SA-2026-3976)
According to the versions of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in GLib. An off-by-one error can occur in the gkeyfilegetlocalestringlist function in the gkeyfile.c file when loading a key file...
RHEL 9 : perl-DBI (RHSA-2026:76760)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:76760 advisory. The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent...
Rocky Linux 8 [CIQ] Security Update: libpcap / libpcap-debuginfo / libpcap-debugsource / libpcap-devel (crlsa-2026_76045)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202676045 advisory. libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access CVE-2026-0799 Tenable has extracted the preceding description block...
EulerOS 2.0 SP15 : EDK2 (EulerOS-SA-2026-3894)
According to the versions of the EDK2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing a crafted DER-encoded ASN.1 structure with a primitivex000D element whose content exceeds 2 gigabytes in length may cause a he...
EulerOS 2.0 SP15 : libssh2 (EulerOS-SA-2026-3987)
According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation...
EulerOS 2.0 SP15 : kernel (EulerOS-SA-2026-3982)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : netdevsim: zero initialize struct iphdr in dummy skbuffCVE-2026-52985 drm/amd/display: Wrap DCN32 phantom-plane allocation in...
openSUSE 16: gimp / gimp-devel / gimp-extension-goat-excercises / gimp-lang / etc (openSUSE-SU-2026:22025-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22025-1 advisory. Changes in gimp: - CVE-2026-96546: one-byte out-of-bounds heap read in the uncompressed DDS loader bsc1282601 - CVE-2026-97185: out-of-bounds...
expat: expat: Information disclosure via heap buffer over-read in XML_ParseBuffer
A flaw was found in expat. A remote attacker can exploit this vulnerability through repeated parse buffer operations with unvalidated buffer lengths, causing a heap buffer over-read. This issue primarily leads to information disclosure by leaking adjacent heap memory contents, which could assist ...
EUVD-2026-92804
Docling has arbitrary file read/write and command execution when shell-escape is enabled when rendering untrusted TikZ with the opt-in Tectonic engine...
Docling has arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine
Summary When the LaTeX backend is configured to render TikZ pictures with the Tectonic engine LatexBackendOptionstikzengine="tectonic", the TikZ body and the document preamble from the input file are compiled by Tectonic without any restriction on TeX's file primitives. A crafted .tex file can re...
GHSA-X3Q2-H9HX-4R4J Docling has arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine
Summary When the LaTeX backend is configured to render TikZ pictures with the Tectonic engine LatexBackendOptionstikzengine="tectonic", the TikZ body and the document preamble from the input file are compiled by Tectonic without any restriction on TeX's file primitives. A crafted .tex file can re...
EUVD-2026-92796
Langflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers...
watchTowr-vs-Atlassian-CVE-2026-21589
CVE-2026-21589 - Jira/Confluence/Bitbucket Arbitrary File Read CVE-2026-21589 - Jira/Confluence/Bitbucket Arbitrary File Read Detection in Action Detection Artifact Generator attempts to check if the target is vulnerable to CVE-2026-21589. Detection is implemented for following products: Atlassia...
EUVD-2026-92766
Ghost: Path Traversal via Locale Setting...
GHSA-M382-6JW4-FMP6 Ghost: Path Traversal via Locale Setting
Impact A vulnerability in how Ghost loads theme translation files allowed an authenticated Administrator to read JSON files outside of the active theme's directory, potentially exposing server configuration secrets. Vulnerable versions This vulnerability is present in Ghost from v1.20.0 up to...
CVE-2026-34499
Use of hard-coded cryptographic key vulnerability in Johnson Controls ADVMS allows Read Sensitive Constants Within an Executable. This issue affects ADVMS: before 3.10...
