ROS-20260922-73-0092

The vulnerability of the help function in the net/netfilter/nfconntrackirc.c module of the netfilter component of the Linux operating system is related to the issue of data being written outside of the buffer. Exploiting this vulnerability could allow a remote attacker to access protected...

ROS-20260922-73-0098

The vulnerability of the xdpmasterredirect function in the net/core/filter.c module, which supports networking functions in Linux kernels, is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

ROS-20260922-73-0007

The vulnerability in gstreamer1-plugins-good is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20260922-73-0014

The vulnerability in gstreamer1-plugins-bad-free is related to the implementation of incorrect control flow management. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20260922-73-0125

The vulnerability in golang-x-crypto is related to the lack of integrity checking for messages. Exploiting this vulnerability allows a remote attacker to cause a service failure by sending specially crafted TCP segments...

ROS-20260922-73-0045

The vulnerability of the rt6fillnode function in the net/ipv6/route.c module of the IPv6 protocol implementation in the Linux operating system is related to the execution of a loop with an unreachable exit condition an “infinite loop”. Exploitation of this vulnerability could allow a remote...

SUSE SLES12 Security Update : google-guest-agent (SUSE-SU-2026:4272-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4272-1 advisory. - CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo- header. -...

CVE-2026-88341

A reachable assertion vulnerability exists in YARA 4.5.8 when loading crafted .yrc compiled rule files. An attacker can provide a malicious file with an invalid arena configuration numbuffers=0 that triggers an assertion failure in yrarenagetptr, causing the application to terminate...

CVE-2026-88341

A reachable assertion vulnerability exists in YARA 4.5.8 when loading specially crafted .yrc compiled rule files . An attacker can provide a malicious file containing an invalid arena configuration (specifically num_buffers=0), which triggers an assertion failure in the yr_arena_get_ptr() functio...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: php (UTSA-2026-090061)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090061 advisory. In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names coul...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libvirt (UTSA-2026-054023)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054023 advisory. A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method failed to acquire the driver-nwfilters mutex before iterating over...

UBUNTU-CVE-2026-61629

nginx ignition is a user interface for the nginx web server. In versions 2.29.0 through 2.40.0, the gin i18n middleware in nginx-ignition's API server runs in front of every HTTP request and calls golang.org/x/text/language.ParseAcceptLanguage on the raw Accept-Language header without imposing an...

CVE-2026-95862: Out-of-bounds Write

A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service DoS attack on the device...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002315)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002315 advisory. NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392. Tenable has extracted the preceding description block directly from the Unity Linux security...

ROS-20260922-73-0103

The vulnerability in the 389-ds-base is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260922-73-0124

The vulnerability in golang-x-crypto is related to incorrect type conversion. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

HPESBNW05151 rev.1 - Remote DoS in remote Telco service Orchestrator

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Service Orchestrator 5.6.0 and below CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2026-69185 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A...

CVE-2026-88341

A reachable assertion vulnerability exists in YARA 4.5.8 when loading crafted .yrc compiled rule files. An attacker can provide a malicious file with an invalid arena configuration numbuffers=0 that triggers an assertion failure in yrarenagetptr, causing the application to terminate...

CVE-2026-62985: Uncaught Exception

request-filtering-agent is an https.Agent implementation that blocks requests to Private/Reserved IP addresses. Prior to 3.2.1, RequestFilteringHttpAgent and RequestFilteringHttpsAgent synchronously threw from createConnection when rejecting a literal private-IP host such as 169.254.169.254 or...

CVE-2026-95818: Stack-based Buffer Overflow

A stack-based buffer overflow in the dynamic loader ld.so of the GNU C Library glibc versions 2.14 through 2.44 allows a local attacker to crash or corrupt the memory of setuid/setgid ATSECURE programs. When such a program's DTRPATH or DTRUNPATH begins with $ORIGIN and is followed by NUL or '/' t...