262239 matches found
UBUNTU-CVE-2026-63335
The RabbitMQ Java client library allows Java and JVM-based application...
PT-2026-78494
Name of the Vulnerable Software and Affected Versions Cisco RoomOS affected versions not specified Description An issue in the USB driver allows an unauthenticated local attacker with physical access to the USB port to execute arbitrary code with root privileges. This occurs due to insufficient...
PT-2026-78621
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A stack-based buffer overflow allows a remote attacker to execute arbitrary code. A stack-based buffer overflow occurs when a program writes more data to a buffer located on...
PT-2026-78666
Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A stack buffer overflow allows a remote authenticated attacker to execute arbitrary code. A stack buffer overflow occurs when a program writes more data to a buff...
PT-2026-78524
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to commit acf5d7c Description A heap buffer overflow exists in the hvcC box writer. This occurs when writing an HEVC configuration record containing more NAL units of a single type than the count field can represent,...
PT-2026-78603
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A stack buffer overflow allows a remote attacker to execute arbitrary code. A stack buffer overflow occurs when a program writes more data to a buffer located on the stack...
PT-2026-78667
Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A stack buffer overflow allows a remote attacker to execute arbitrary code. A stack buffer overflow occurs when a program writes more data to a buffer located on...
Oracle Linux 8 : gstreamer1-plugins-bad-free (ELSA-2026-56521)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-56521 advisory. - Fix IMA ADPCM input size check in adpcmdec CVE-2026-19387 Resolves: RHEL-235503 Tenable has extracted the preceding description block directly from the Oracl...
UBUNTU-CVE-2026-73073
Vim is an open source, command line text editor. Prior to 9.2.0845, St...
PT-2026-78526
Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to commit 1c10bcc Description A heap buffer overflow exists in the RIST protocol reader within libavformat/librist.c. The function librist read fails to respect its size argument, copying the entire received payload lengt...
PT-2026-78362
Name of the Vulnerable Software and Affected Versions nnn version 5.2 Description The software stores the homelen variable as a uchar t, which limits its range to 0-255. An attacker capable of influencing the execution environment can provide a HOME path with a length that is truncated to 0. This...
The vulnerability of the to_char(timestamptz) function in the PostgreSQL database management system allows a hacker to execute arbitrary code.
The vulnerability of the tochartimestamptz function in the PostgreSQL database management system is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
UBUNTU-CVE-2026-74987
Internally found bugs present in Thunderbird ESR 140.13, Thunderbird E...
CVE-2026-74990
Internally found bugs present in Thunderbird ESR 140.13, Thunderbird E...
Photon OS 5.0: Postgresql15 PHSA-2026-5.0-92-0959
An update of the postgresql15 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0959. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
RockyLinux 8 : gstreamer1-plugins-bad-free (RLSA-2026:56521)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:56521 advisory. gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder CVE-2026-19387 Tenable has extracted the preceding...
CVE-2026-75976
TRENDnet TEW-823DRU router firmware 1.1.02b01 contains a stack-based buffer overflow in the strcpy call within /cgi-bin/wan.cgi (NVRAM component), triggered by the wan_l2tp_password argument. CVSS 9.9 (CRITICAL) reflects remote, unauthenticated-exploitable complete confidentiality/integrity/avail...
CVE-2026-75976 TRENDnet TEW-823DRU NVRAM wan.cgi strcpy stack-based overflow
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy of the file /cgi-bin/wan.cgi of the component NVRAM. This manipulation of the argument wanl2tppassword causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been ma...