EUVD-2026-87083

Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via the pfBlockerNG package...

Squid proxy server Buffer Overflow

The Squid proxy server vulnerability is related to a buffer overflow in dynamic memory. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code...

NVIDIA NVDEC Hardware Decoder

The vulnerability of NVIDIA’s NVDEC hardware decoder in the FFmpeg multimedia library lies in the repeated release of previously released memory. Exploiting this vulnerability can allow a remote attacker to corrupt memory, cause service failures, or execute arbitrary code...

FFmpeg vf_hqdn3d Heap Buffer Overflow DoS

The vulnerability of the video processing filter vfhqdn3d in the FFmpeg multimedia library is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to corrupt memory, cause service failures, or execute arbitrary code...

lib Image ExifTool GM.pm Code Execution

The vulnerability of the Processmrld function in the lib/Image/ExifTool/GM.pm handler for JPEG/QuickTime/MOV/MP4 metadata processing in the ExifTool library related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability could allow an attacker to execute...

Vim Buffer Overflow

The vulnerability of the Vim text editor is related to overflowing the buffer in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Xen Memory Use After Free

The vulnerability of Xen hypervisors is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Linux kernel Code Execution

The vulnerability of the Linux operating system’s kernel is related to insufficient control over resources with dynamic management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Glances Outdated._load_cache() Code Execution

The vulnerability of the Outdated.loadcache function in the glances/outdated.py monitoring tool is related to deserialization mechanism flaws. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Erlang/OTP Stack Buffer Overflow

The vulnerability of the Erlang/OTP software platform is related to overflowing buffers in the stack. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

KLA91362 Multiple vulnerability in Microsoft Office

Multiple vulnerability was found in Microsoft Office. Malicious users can exploit this vulnerability to bypass security restrictions, execute arbitrary code. Original advisories CVE-2026-100208 Exploitation Related products Microsoft-Office Microsoft-365 CVE list CVE-2026-100208 critical Solution...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : curl vulnerabilities (USN-8820-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8820-1 advisory. Eunsoo Kim discovered that curl incorrectly handled SASL negotiation for LDAP authentication ...

Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 24.04 LTS / 26.04 LTS : libass vulnerabilities (USN-8815-1)

The remote Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8815-1 advisory. It was discovered that libass incorrectly handled parsing operations for specific nested character string...

RockyLinux 10 : libxml2 (RLSA-2026:71586)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:71586 advisory. libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow CVE-2026-86138 libxml2: libxml2: Data integrity issues due to integer overflo...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Expat vulnerabilities (USN-8813-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8813-1 advisory. It was discovered that Expat did not correctly handle certain integer arithmetic...

Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : GDAL vulnerabilities (USN-8812-1)

The remote Ubuntu 14.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8812-1 advisory. It was discovered that GDAL incorrectly handled certain netCDF files. An attacker could...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : GStreamer Good Plugins vulnerabilities (USN-8798-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8798-1 advisory. It was discovered that GStreamer Good Plugins incorrectly parsed certain MRF files. A remote...

Adobe Experience Manager Forms JEE <= 6.5.25 / 6.5 LTS SP2 Multiple Vulnerabilities (APSB26-151)

The version of Adobe Experience Manager Forms JEE installed on the remote host is 6.5.25 or earlier, or 6.5 LTS SP2 or earlier. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-151 advisory. - Adobe Experience Manager Forms JEE is affected by an Incorrect...

PT-2026-98858

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Improper limitation of a pathname to a restricted directory allows a remote attacker to obtain sensitive information, delete arbitrary files, or execute arbitrary code. Recommendations At t...

PT-2026-99116

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The SOAP HTTP client contains a flaw in how it manages response buffer growth. The system uses a check based on signed integer overflow, which is considered...