RockyLinux 10 : ghostscript (RLSA-2026:83551)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:83551 advisory. ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and procedure-stream use- after-free CVE-2026-101258 ghostscript:...

Oracle Linux 8 : kernel (ELSA-2026-83157)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-83157 advisory. - md/raid5-ppl: fix use-after-free in ppldoflush CKI Backport Bot RHEL-278122 CVE-2026-93262 - svcrdma: Reject Write/Reply chunks with segcount 0 Olga...

RockyLinux 9 : libsoup (RLSA-2026:83384)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:83384 advisory. libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion CVE-2026-102556 libsoup: libsoup: Heap buffer overflow during WebSocket...

AlmaLinux 9.2 [TuxCare] Security Update: freeipmi / freeipmi-bmc-watchdog / freeipmi-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792162546)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792162546 advisory. - ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmioemfujitsugetselentrylongtext in...

PT-2026-115385

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.32.0 Description A heap buffer overflow occurs in the persistent cache read entry v3 function. Local attackers can corrupt memory by providing a specially crafted v3 persistent cache file. By specifying large width...

Rocky Linux 9.6 [TuxCare] Security Update: flatpak / flatpak-devel / flatpak-libs / flatpak-selinux / etc (ALMALINUX9.6:CLSA-2026:1792153368)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792153368 advisory. - The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit...

CVE-2026-26846

Buffer Overflow vulnerability in WEINVEIW CO.,LTD EBPro v.6.10.01.51020251022 allows a remote attacker to execute arbitrary code via the UtilityManagerEx.exe component...

CVE-2026-46471

An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemuxparseuuid function may read past the end of a heap-allocated buffer, allowing an attacker to disclose heap memory contents...

CVE-2026-109990: Improper Neutralization of Input During Web Page Generation

The Flying Scripts: Delay JavaScript to Improve Site Speed & Performance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-26846: Undefined Security Weakness

Buffer Overflow vulnerability in WEINVEIW CO.,LTD EBPro v.6.10.01.51020251022 allows a remote attacker to execute arbitrary code via the UtilityManagerEx.exe component...

PT-2026-125060

ZDICT trainFromBuffer is never told the length of the samples buffer, so train from buffer checked that the sample sizes add up to it. With overflow checks off, as in release builds, that sum wrapped around: sizes totalling 2^64 plus the buffer length passed the check, and the trainer read past t...

RDP Client Heap Buffer Overflow DoS

The vulnerability of the winpralignedmalloc function in the RDP client FreeRDP is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information or cause service failures...

TRENDnet TEW-432BRP Router Form TCP Setup DoS

The vulnerability of the formTcpipSetup function in the /goform/formTcpipSetup file of the TRENDnet TEW-432BRP router microprogramming system is related to the issue of data being written outside the buffer in memory when processing the Name parameter. Exploiting this vulnerability could allow an...

Linux netlink Heap Buffer Overflow DoS

The vulnerability of the net/tipc/netlink.c component in the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the qcadmphdr function in the drivers/bluetooth/hciqca.c component of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel dev_dax_kmem_remove Heap Buffer Overflow DoS

The vulnerability of the devdaxkmemremove function in the drivers/dax/kmem.c kernel module of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux net/sched/cls_bpf Buffer Overflow DoS

The vulnerability in the net/sched/clsbpf.c component of the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux seq_midi Heap Buffer Overflow DoS

The vulnerability in the sound/core/seq/seqmidi.c component of the Linux operating system is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...

Linux kernel vxlan_gro_prepare_receive Heap Buffer Overflow DoS

The vulnerability of the vxlangropreparereceive function in the drivers/net/vxlan/vxlancore.c component of the Linux kernel is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protect...

Microsoft Visio Graphical Editors Code Execution

The vulnerability of Microsoft Visio graphical editors in Microsoft Office packages and 365 Apps for Enterprise is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...