PT-2026-79316

Name of the Vulnerable Software and Affected Versions Apache CloudStack versions 4.14.0.0 through 4.20.3.0 Apache CloudStack versions 4.21.0.0 through 4.22.1.0 Description An authenticated tenant can perform Server-Side Request Forgery SSRF by registering a template that points to a malicious...

UBUNTU-CVE-2026-18295

GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution V...

Linux Distros Unpatched Vulnerability : CVE-2026-18306

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected...

Linux Distros Unpatched Vulnerability : CVE-2026-77647

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to incorrect...

PT-2026-79481

Name of the Vulnerable Software and Affected Versions xShop version 3.0.3 Description An unrestricted file upload flaw exists in this open-source shop developed in Laravel. The issue stems from insufficient validation of uploaded files, allowing an authenticated administrator to upload executable...

PT-2026-79457

Name of the Vulnerable Software and Affected Versions Xinference versions prior to 2.7.0 Description Xinference passes attacker-influenced Llama3 tool-call output to the eval function within xinference/model/llm/tool parsers/llama3 tool parser.py and xinference/model/llm/utils.py. Requests sent t...

Linux Distros Unpatched Vulnerability : CVE-2026-15686

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adminer multiquery Incorrect Check of Function Return Value Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary...

Microsoft Entra ID Deserialization of Untrusted Data Vulnerability

Microsoft Entra ID formerly known as Azure Active Directory contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network...

UBUNTU-CVE-2026-18300

GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerabi...

UBUNTU-CVE-2026-18298

GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Exec...

Linux Distros Unpatched Vulnerability : CVE-2026-18298

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code ...

Linux Distros Unpatched Vulnerability : CVE-2026-18297

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code...

PT-2026-79386

Name of the Vulnerable Software and Affected Versions SPIP versions prior to 4.4.21 Description Unauthenticated remote attackers can execute arbitrary code due to a code injection flaw. This issue occurs when the analyse resultat skel function mishandles the X-Spip-Filtre HTTP request header. Thi...

Linux Distros Unpatched Vulnerability : CVE-2026-18307

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...

UBUNTU-CVE-2026-18304

GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerabi...

UBUNTU-CVE-2026-18308

GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerabi...

Linux Distros Unpatched Vulnerability : CVE-2026-18308

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected...

UBUNTU-CVE-2026-18301

GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerabi...

Linux Distros Unpatched Vulnerability : CVE-2026-18303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...

AIX : Multiple Vulnerabilities (IJ59566)

The version of AIX installed on the remote host is prior to APAR IJ59566. It is, therefore, affected by multiple vulnerabilities as referenced in the IJ59566 advisory. - IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a flaw in...