Duplicate Advisory: Quadratic-time DoS in PorterStemmer via long runs of 'y'

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-ww6m-cw3f-q94g. This link is maintained to preserve external references. Original Description nltk PorterStemmer in versions = 3.10.2 fixed in 3.10.3 contains an inefficient-algorithmic-complexity denial of...

EUVD-2026-66849

A single hostile AMQP message can terminate the entire consumer JVM System.exit99, not just the listener thread — full availability loss for every workload co-located in that process. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier...

Linux Distros Unpatched Vulnerability : CVE-2026-77117

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - glibc - None Red Hat Enterprise Linux - glibc: Non-progress DoS in SHIFTJISX0213 - Ubuntu Linux - SHIFTJISX0213 converter hang in shiftjisx0213.c...

The vulnerability of the rz_mtu3_count_enable_write() function in the drivers/counter/rz-mtu3-cnt.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rzmtu3countenablewrite function in the drivers/counter/rz-mtu3-cnt.c module of the Linux kernel is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Photon OS 5.0: Glib PHSA-2026-5.0-91-0960

An update of the glib package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0960. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Fedora 43 : apr-util (2026-1ba2df871e)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-1ba2df871e advisory. - new version 1.6.5 - security fixes Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has n...

libwireshark19-4.6.8-2.1 on GA media (moderate)

libwireshark19-4.6.8-2.1 on GA media Announcement ID: openSUSE-SU-2026:11579-1 Rating: moderate Cross-References: CVE-2026-19694 CVE-2026-19695 CVE-2026-19696 CVE-2026-76879 CVE-2026-76880 CVE-2026-76881 CVE-2026-76882 CVE-2026-76883 CVE-2026-76884 CVE-2026-76885 CVE-2026-76886 CVE-2026-76887...

CVE-2026-62861

TypeBot is a chatbot builder tool. Prior to 3.18.0, any authenticated non-guest workspace member can remove another workspace's public custom domain and make typebots on that domain unavailable. The custom-domain delete handler in handleDeleteCustomDomain.ts authorizes a caller against a...

CVE-2026-62861

TypeBot (chatbot builder) is vulnerable to cross-tenant custom-domain removal prior to 3.18.0 . The root cause is in the custom-domain delete handler (handleDeleteCustomDomain.ts): it authorizes a caller against a client-supplied workspaceId but forwards the client-supplied domain name to the sha...

CVE-2026-20731

A flaw was found in the Intel NPU Driver. Due to improper buffer restrictions, an unprivileged local attacker with authenticated user access could exploit this vulnerability. This could lead to a denial of service DoS condition, impacting the availability of the system. Mitigation No mitigation i...

EUVD-2026-65329

The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Authorization' setting. The device increments a retry counter on each failed SMS password attempt; after 5 consecutive failed attempts, SMS password authorization is automatically...

CVE-2026-63587 SMS Password Authorization Bypass via Failed Attempt Counter

The SMS control function of IE-SR-2TX-WL-4G devices can require a password for SMS commands via the 'Enable Password Authorization' setting. The device increments a retry counter on each failed SMS password attempt; after 5 consecutive failed attempts, SMS password authorization is automatically...

CVE-2026-63587

IE-SR-2TX-WL-4G devices contain a logic flaw in their SMS password authorization mechanism. When the 'Enable Password Authorization' setting is active, the device increments a retry counter on each failed password attempt. After 5 consecutive failures , SMS password authorization is automatically...

SAP Memory Pipes (MPI) Desynchronization

SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable to request smuggling and request concatenation attacks. An unauthenticated attacker can prepend a victim's request with arbitrary data. This...

EUVD-2026-65191

SAP S/4HANA Private Cloud uses a third-party component that contains a Regular Expression Denial of Service ReDoS vulnerability. An unauthenticated attacker could supply specially crafted input that triggers excessive processing within the affected functionality. Successful exploitation could...

The vulnerability of the amdgpupciSlotReset() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_device.c source code of the Direct Rendering Infrastructure (DRI) AMD GPU kernel for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the amdgpupciSlotReset function in the drivers/gpu/drm/amd/amdgpu/amdgpudevice.c source code of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allo...

The vulnerability of the rt_mt6_check() function in the net/ipv6/netfilter/ip6t_rt.c module of the Linux operating system’s IPv6 kernel implementation allows a attacker to compromise the confidentiality and accessibility of protected information.

The vulnerability of the rtmt6check function in the net/ipv6/netfilter/ip6trt.c module of the Linux operating system’s IPv6 kernel implementation is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the iptunnel_xmit_stats() function in the include/net/ip_tunnels.h header file of the Linux kernel allows a attacker to compromise the integrity and accessibility of the protected information.

The vulnerability of the iptunnelxmitstats function in the include/net/iptunnels.h module of the Linux operating system is related to improper release of resources. Exploiting this vulnerability allows a remote attacker to compromise the integrity and accessibility of protected information...

The vulnerability in the kernel/trace/traceeventshist.c module, which supports Linux operating system kernel tracing, allows an attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the kernel/trace/traceeventshist.c module, which supports kernel tracing in Linux operating systems, is related to errors in calculating buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

hauler-2.0.3-1.1 on GA media (moderate)

hauler-2.0.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:11574-1 Rating: moderate Cross-References: CVE-2026-41888 CVE-2026-72817 CVSS scores: CVE-2026-41888 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L CVE-2026-41888 SUSE : 6.3...