EulerOS 2.0 SP11 : icu (EulerOS-SA-2026-4237)

According to the versions of the icu packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed at the...

PT-2026-110958

Name of the Vulnerable Software and Affected Versions IBM Power Systems Firmware versions FW1060.00 through FW1060.81 Description A flaw exists in the service processor mailbox interface. An attacker with authenticated service-level access to the Field Service Processor FSP can send a specially...

CVE-2026-102627: Improper Limitation of a Pathname to a Restricted Directory

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of file paths during archive extraction...

PT-2026-111122

Name of the Vulnerable Software and Affected Versions IBM i version 7.3 IBM i version 7.4 IBM i version 7.5 IBM i version 7.6 Description Improper data sanitization within the HTTP Server Administration web application allows a remote authenticated attacker to execute arbitrary code or obtain...

EulerOS 2.0 SP13 : perl-IO-Compress (EulerOS-SA-2026-4087)

According to the versions of the perl-IO-Compress packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob...

Substance 3D Sampler Buffer Overflow RCE

The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models involves writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

EulerOS 2.0 SP11 : libtiff (EulerOS-SA-2026-4342)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap...

ALSA-2026:80497 Important: flatpak security update

Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: Flatpak: Arbitrary code execution via missing symlink protection CVE-2026-90616 flatpak: flatpak: Arbitrary write access as root via extra-data extraction CVE-2026-96275...

Important: emacs

Issue Overview: A flaw was found in GNU Emacs. This vulnerability, a memory corruption issue, occurs when Emacs processes specially crafted SVG Scalable Vector Graphics CSS Cascading Style Sheets data. A local user could exploit this by convincing a victim to open a malicious SVG file, which may...

Important: rpm

Issue Overview: A flaw was found in rpmbuild. When rpmbuild processes a crafted tarball in tarball mode, a specially designed tar member name can lead to macro injection. This vulnerability allows a remote attacker to execute arbitrary code on the system by convincing a user to build a malicious...

ROS-20261012-73-0165

The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Amazon Linux 2023 : python3-bson, python3-pymongo, python3-pymongo-gridfs (ALAS2023-2026-3155)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3155 advisory. A flaw was found in pymongo. An integer overflow exists in the bundled native extension for Binary JSON BSON document encoding when processing an unusually large amount of data. An unprivileged attacke...

Important: python-pymongo

Issue Overview: A flaw was found in pymongo. An integer overflow exists in the bundled native extension for Binary JSON BSON document encoding when processing an unusually large amount of data. An unprivileged attacker who can submit oversized data to an application for encoding can trigger an...

CVE-2026-109308: Improper Control of Generation of Code

Craft CMS 4.0.0 before 4.18.7 and 5.0.0 before 5.10.14 passes the raw 'updates' request parameter in AppController::actionCacheUpdates to UpdatesModel without Component::cleanseConfig, allowing behavior and event-handler injection. Authenticated control panel users with the performUpdates...

Important: rpm

Issue Overview: A flaw was found in rpmbuild. When rpmbuild processes a crafted tarball in tarball mode, a specially designed tar member name can lead to macro injection. This vulnerability allows a remote attacker to execute arbitrary code on the system by convincing a user to build a malicious...

Cisco NX-OS MPLS Operation Code Execution

The vulnerability of the MPLS Operation, Administration, and Maintenance OAM function in the Cisco NX-OS operating system of Cisco Nexus 3000 Series switches and Cisco Nexus 9000 Series switches is related to the release of previously unallocated memory. Exploiting this vulnerability can allow an...

Substance 3D Sampler Buffer Overflow RCE

The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Substance 3D Sampler Buffer Overflow RCE

The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models involves writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Substance 3D Sampler Buffer Overflow RCE

The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models involves the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Adobe Substance 3D Designer Buffer Overflow

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...