CVE-2026-93445: Improper Control of Generation of Code

IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code...

PT-2026-107604

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software for Cisco Nexus 3000 Series Switches affected versions not specified Cisco NX-OS Software for Cisco Nexus 9000 Series Switches affected versions not specified Description An issue exists in the MPLS Operation,...

PT-2026-107616

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software affected versions not specified Description An issue exists in the VXLAN Operation, Administration, and Maintenance OAM feature, known as NGOAM, due to improper input validation of IP traffic. An unauthenticated remote...

TeamViewer Code Execution

The vulnerability of TeamViewer’s remote control software lies in improper external control of the username or file path. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Microsoft Office Buffer Overflow Code Execution

The vulnerability of the Microsoft Office suite is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Office Memory Use After Free

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Graphics Component Microsoft Office Code Execution

The vulnerability of the Graphics Component component in the Microsoft Office software suite is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2026-106372

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a...

CVE-2026-76501: Stack-based Buffer Overflow

A vulnerability in the Segment Routing over IPv6 SRv6 Operation, Administration, and Maintenance OAM feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service DoS on an affected...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : FluidSynth vulnerabilities (USN-8885-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8885-1 advisory. It was discovered that FluidSynth did not properly validate the channel argument ...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Tesseract vulnerabilities (USN-8882-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8882-1 advisory. It was discovered that Tesseract incorrectly handled crafted .traineddata models...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : libsoup vulnerabilities (USN-8890-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8890-1 advisory. It was discovered that libsoup incorrectly handled certain HTTP/2 requests. A remote attacker...

SUSE SLES15: libpython3_12-1_0 / python312 / python312-base / python312-curses / etc (SUSE-SU-2026:4534-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4534-1 advisory. - CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined bsc1259611. - CVE-2026-0864...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : U-Boot vulnerabilities (USN-8884-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8884-1 advisory. Timo Preil discovered that U-Boot incorrectly handled certain malformed ZFS file system...

Linux Distros Unpatched Vulnerability : CVE-2026-106293

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type confusion in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute...

SUSE SLES15: docker-stable / docker-stable-bash-completion / etc (SUSE-SU-2026:4535-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4535-1 advisory. - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header...

RockyLinux 8 : dovecot (RLSA-2026:76763)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:76763 advisory. dovecot: Dovecot: Denial of Service via IMAP ID command with excessive parameters CVE-2026-42391 dovecot: Dovecot: Authentication bypass via incorrect...

Ubuntu 24.04 LTS / 26.04 LTS : FreeRDP vulnerabilities (USN-8880-1)

The remote Ubuntu 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8880-1 advisory. It was discovered that FreeRDP contained multiple security issues. An attacker could possibly use these issues to obtain sensitive information, cause...

Adobe Animate 23.x < 23.0.17 / 24.x < 24.0.15 Code Injection (APSB26-132)

The version of Adobe Animate installed on the remote host is 23.x prior to 23.0.17, or 24.x prior to 24.0.15. It is, therefore, affected by a code injection vulnerability as referenced in the apsb26-132 advisory. - Animate is affected by an Improper Control of Generation of Code 'Code Injection'...

PT-2026-107621

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software affected versions not specified Description An issue exists in the Segment Routing over IPv6 SRv6 Operation, Administration, and Maintenance OAM feature, known as NGOAM. This is caused by improper input validation of IP...