CVE-2026-58099 Memory safety bugs in kqueue copy-on-fork implementation

When copying knotes from a parent kqueue to a child, the copy code did not correctly exclude marker knotes used internally to track list traversal position before marking them as in-flux and releasing the kqueue lock. If another thread freed a marker while the lock was dropped, the subsequent...

CVE-2026-58098

The FreeBSD kernel is vulnerable to a heap out-of-bounds access in the semop(2) system call. The issue arises because the 15-bit sequence number used to verify if a semaphore set was removed while a process was sleeping can wrap around if many sets are created and destroyed quickly. This allows a...

CVE-2026-76659

A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service...

Oracle WebLogic Server Administration Console - Remote Code Execution

The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services versions 0.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0 contain an easily exploitable vulnerability that allows unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic Server. id:...

FUEL CMS 1.4.1 - Remote Code Execution

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. id: CVE-2018-16763 info: name: FUEL CMS 1.4.1 - Remote Code Execution author: pikpikcu severity: critical description: FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/...

Oracle Business Intelligence/XML Publisher - XML External Entity Injection

Oracle Business Intelligence and XML Publisher 11.1.1.9.0 / 12.2.1.3.0 / 12.2.1.4.0 are vulnerable to an XML external entity injection attack. id: CVE-2019-2616 info: name: Oracle Business Intelligence/XML Publisher - XML External Entity Injection author: pdteam severity: high description: Oracle...

EUVD-2026-101809

A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service...

EUVD-2026-101807

A vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service when traceroute is executed under certain conditions...

CVE-2026-110810

A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function whispermodelload of the file src/whisper.cpp of the component Model Loader. Performing a manipulation of the argument ttype results in out-of-bounds read. The attack must be initiated from a local position...

CLEANSTART-2026-HI24388 When logs are written to a widely-writable directory (the default), an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in i...

Security vulnerability affects the nfs-subdir-external-provisioner package. When logs are written to a widely-writable directory the default, an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place...

kernel: ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get

A flaw was found in the Advanced Linux Sound Architecture ALSA Sound Open Firmware SOF ipc3-control component of the Linux kernel. This vulnerability, a heap overflow, occurs due to incorrect bounds checks when handling user data lengths. An unprivileged local user can exploit this to write past...

EUVD-2026-101663

A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. Affected is the function STFile.gettensor of the file exllamav2/stloader.py of the component Safetensors Tensor Loader. Performing a manipulation of the argument dataoffsets results in buffer overflow. The attack is possible to be...

CVE-2026-110809

A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.createreq of the file python/sglang/srt/session/sessioncontroller.py of the component Session Cleanup. Such manipulation leads to denial of service. The attack may be...

Oracle Linux 7 : gstreamer1-plugins-base (ELSA-2026-69866)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69866 advisory. - Backport fix for CVE-2026-18297 Orabug: 40057731 - Security update for CVE-2026-2921 Orabug: 39199326 Tenable has extracted the preceding description block...

PT-2026-115367

Name of the Vulnerable Software and Affected Versions Terragrunt versions prior to 1.1.1 Description The terragrunt catalog command clones repositories into a temporary directory using a deterministic path based on a base64 sha1 hash of the repository URL. A local attacker with write access to th...

UBUNTU-CVE-2026-110698

A security vulnerability has been detected in Praat up to 7.0.02. Affected is the function whispermodelload of the file external/whispercpp/whisper.cpp of the component Model Loader. The manipulation of the argument ndims leads to out-of-bounds write. The attack can be initiated remotely. The...

PT-2026-115257

Name of the Vulnerable Software and Affected Versions Microsoft Office PowerPoint affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to disclose information over a network. An out-of-bounds read occurs when the software reads data past the end of the...

CVE-2026-110936: Uncontrolled Search Path Element

A vulnerability has been identified in Siemens Software Center All versions V4.0.9.8. The affected application loads dynamic-link libraries DLLs from an uncontrolled search path. This could allow an authenticated local attacker to place a specially crafted DLL in a directory that the application...

UBUNTU-CVE-2026-109149

A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is an unknown function. Executing a manipulation can lead to uncontrolled memory allocation. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not...

PT-2026-114876

Name of the Vulnerable Software and Affected Versions sMedio DTCP MOVE versions prior to 1.4.5 Description A missing authentication for critical function allows remote attackers to gain unauthorized access to the system. Recommendations Update to sMedio DTCP MOVE version 1.4.5 or later...