SUSE SLES15: apache2-mod_php8 / php8 / php8-bcmath / php8-bz2 / php8-calendar / etc (SUSE-SU-2026:4651-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4651-1 advisory. - CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser bsc1282981. - CVE-2025-14181:...

Unity Linux 20.1070e Security Update: libsoup (UTSA-2026-130370)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130370 advisory. A heap out-of-bounds read flaw was found in libsoup. When parsing multipart HTTP messages, an integer type mismatch between the caller and soupheadersparse can cause...

RockyLinux 8 : kernel-rt (RLSA-2026:82806)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:82806 advisory. kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: ipv6: validate extension header length before copying to cmsg...

Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_81552)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202681552 advisory. kernel: drm/xe/uapi: Reject cohnone PAT index for CPU cached memory in madvise CVE-2026-46309 kernel: macsec: fix replay protection at XPN lower-PN wrap...

RHEL 9 : libsoup (RHSA-2026:83384)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:83384 advisory. The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: libsoup: libsoup: Heap buffer overflow from...

FreeBSD : FreeBSD -- Remotely triggerable buffer overflow in tcp_rack (e40e981e-c847-11f1-ada3-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the e40e981e-c847-11f1-ada3-bc241121aa0a advisory. When the PCM sample array needs to grow, the RACK stack doubles a 16-bit allocation counter. Repeated...

CVE-2026-76660: Improper Input Validation

A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data...

PT-2026-115265

Name of the Vulnerable Software and Affected Versions unarr version 1.1.1 Description An off-by-one heap-based buffer overflow occurs in the tar get name function within tar/parse-tar.c, which is accessible via the ar entry get name API. A remote attacker can provide a specially crafted TAR archi...

HPE NonStop Debug Utilities buffer error vulnerability

HPE NonStop Debug Utilities T0638L01^AAJ and earlier versions contain a buffer error vulnerability. This vulnerability stems from a heap buffer overflow, which may corrupt the resume execution address and potentially lead to flow redirection...

PT-2026-115093

Name of the Vulnerable Software and Affected Versions react/http versions 1.0.0 through 1.11.0 Description ReactHttpBrowser fails to enforce a size limit on the internal buffer used to store response-header bytes. When the handleData function in ClientRequestStream receives data, it appends...

CVE-2026-108447: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-76665: Out-of-bounds Read

A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buffer overflow...

CVE-2026-79840: Stack-based Buffer Overflow

A buffer overflow vulnerability in HPE NonStop XABroker may cause memory corruption, resulting in application crash...

CVE-2026-108449: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-110958: Heap-based Buffer Overflow

A vulnerability was found in Wavlink WN530HG4B M30HG4BV260724. The impacted element is an unknown function of the file api.cgi. The manipulation results in heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used. Upgrading to...

PT-2026-115125

Name of the Vulnerable Software and Affected Versions AdPlug versions prior to 2.5 Description A heap-based buffer overflow occurs in the CksmPlayer::update function within src/ksm.cpp. The issue arises because the software writes past the fixed databuf2048 array without performing bounds checkin...

PT-2026-114763

A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buffer overflow...

PT-2026-114994

: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only B10 / C10 – UniLogic versions prior to 1.41.329...

CVE-2026-108454: Buffer Over-read

Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...

RockyLinux 10 : hplip (RLSA-2026:82883)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:82883 advisory. hplip: HP Linux Imaging and Printing Software - Use of DSA Key CVE-2025-43023 hplip: HPLIP: Multiple vulnerabilities enabling local code execution and...