GitLab numeric error vulnerability

A numerical error vulnerability exists in GitLab CE/EE versions from 7.0 up to and including 18.11.13, in version 19.0 prior to 19.0.10, in version 19.1 prior to 19.1.9, in version 19.2 prior to 19.2.9, in version 19.3 prior to 19.3.6, in version 19.4 prior to 19.4.3, and in version 19.5 prior to...

EUVD-2025-211174

An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a web-accessable URL and when passed said URL in the the templateURL to the localstack/cloudformation/deploy endpoint, the hosted content can get executed in the context of the...

CVE-2025-65200

An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a web-accessable URL and when passed said URL in the the templateURL to the localstack/cloudformation/deploy endpoint, the hosted content can get executed in the context of the...

ALSA-2026:88359 Important: postgresql16-pgvector security update

Open-source vector similarity search for Postgres. Supports L2 distance, inner product, and cosine distance Security Fixes: pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build CVE-2026-103484 For more details about the security issues, including the...

KLA91372 ACE vulnerability in Microsoft Server Software

Arbitrary code execution vulnerability was found in Microsoft Server Software. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2026-96185 Exploitation Related products Microsoft-Exchange-Online CVE list CVE-2026-96185 critical Solution Install...

KLA91371 ACE vulnerability in Microsoft Developer Tools

Arbitrary code execution vulnerability was found in Microsoft Developer Tools. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2026-105014 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Azure CVE list...

Amazon Linux 2023 : python3-awscrt (ALAS2023-2026-3280)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3280 advisory. Improper handling of HPACK dynamic table size updates in the AWS Common Runtime aws-c-http library might allow a remote threat actor operating a server to cause memory corruption on a connecti...

TencentOS Server 3: gimp:2.8 (TSSA-2026:1195)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1195 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Rocky Linux 9.6 [TuxCare] Security Update: emacs / emacs-common / emacs-devel / emacs-filesystem / emacs-lucid / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792623317)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792623317 advisory. - GNU Emacs before 31.2 and TRAMP through 2.8.2 allows OS command injection via a filename because tramp- user-regexp has an...

AlmaLinux 10 : mariadb11.8 (ALSA-2026:84799)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:84799 advisory. pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions CVE-2026-86145 pcre2: PCRE2: Memory corruption...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 : Ghostscript vulnerabilities (USN-8949-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS / 26.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8949-1 advisory. Rick de Jager discovered that Ghostscript incorrectly handled memory under certain...

SUSE SLES15: pgvector-devel / postgresql16-pgvector / postgresql17-pgvector / etc (SUSE-SU-2026:4804-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4804-1 advisory. This update for pgvector fixes the following issue: - CVE-2026-103484: database users with the ability to create an IVFFlat index can write...

RHEL 10 : postgresql16-pgvector (RHSA-2026:88359)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:88359 advisory. Open-source vector similarity search for Postgres. Supports L2 distance, inner product, and cosine distance Security Fixes: pgvector: pgvector:...

Rocky Linux 8 [CIQ] Security Update: xorg-x11-server-Xwayland / xorg-x11-server-Xwayland-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_86907)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202686907 advisory. xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling CVE-2026-93516 xorg-x11-server: xorg-x11-server:...

Important: httpd security update

The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: httpd: HTTP response smuggling via crafted Transfer-Encoding response in modproxyuwsgi CVE-2026-63718 httpd: httpd: Denial of Service via integer overflow in moddavfs...

RHEL 8 : flute, libbase, libfonts, libformula, liblayout, libloader, libreoffice, librepository, libserializer, pentaho-libxml, pentaho-reporting-flow-engine, and sac (RHSA-2026:88164)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:88164 advisory. SAC is a standard interface for CSS parsers, intended to work with CSS1, CSS2, CSS3 and other CSS derived languages. Security Fixes:...

PT-2026-121501

Name of the Vulnerable Software and Affected Versions localstack version 4.9.2 Description An issue allows attackers to execute arbitrary code within the context of the Docker container. This occurs when a crafted URL, hosting malicious content, is passed to the templateURL parameter at the '...

Memory corruption vulnerabilities in PHP

Overview Two memory-related vulnerabilities have been identified in PHP versions prior to 8.2.35, 8.3.36, 8.4.27, and 8.5.12. An unauthenticated remote attacker with network access to PHP web services can exploit these vulnerabilities via specially crafted HTTP requests to potentially achieve...

Important: flute, libbase, libfonts, libformula, liblayout, libloader, libreoffice, librepository, libserializer, pentaho-libxml, pentaho-reporting-flow-engine, and sac security, bug fix, and enhancement update

SAC is a standard interface for CSS parsers, intended to work with CSS1, CSS2, CSS3 and other CSS derived languages. Security Fixes: libreoffice: heap buffer overflow in PDF import stream handling CVE-2026-63274 libreoffice: stack buffer overflow in CFF to Type 1 font conversion CVE-2026-63276...

ALSA-2026:88164 Important: flute, libbase, libfonts, libformula, liblayout, libloader, libreoffice, librepository, libserializer, pentaho-libxml, pentaho-reporting-flow-engine, and sac security, bug fix, and enhancement update

SAC is a standard interface for CSS parsers, intended to work with CSS1, CSS2, CSS3 and other CSS derived languages. Security Fixes: libreoffice: heap buffer overflow in PDF import stream handling CVE-2026-63274 libreoffice: stack buffer overflow in CFF to Type 1 font conversion CVE-2026-63276...