CVE-2026-72007

A flaw was found in the Linux kernel's power management domain pmdomain component, specifically impacting the i.MX8MP VC8000E. A timing issue during the power up and down cycling of the VC8000E/VPUMIX can cause the VPUNOC power down handshake to hang. This can lead to system instability and a...

Malicious code in dxrs-dos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1634fc433b5cd1e5e4baa139e8795b6b6ef51bb80fdbdc5183fb7fed419aee33 Package is an openly-advertised DDoS/booter toolkit L4/L7 flood methods, SSH brute force, C2 panel builder with keywords such as "ddos attack script"...

Malicious code in dxr-dos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3bad9a4bf59f5c59d899f7be2c655adaba56f8ce65f284519d9778ea1bcaff1f bin/dxr.js unconditionally requires the external npm package 'deathoffather-project' pinned to the mutable 'latest' tag and immediately invokes an...

gstreamer: gstreamer: DTLS certificate Subject DN stack buffer overflow in openssl_verify_callback

A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the peer certificate Subject Distinguished Name is printed into a fixed-size 2048-byte stack buffer without bounds checking. A remote unauthenticated attacker can send a certificate with an...

kernel: scsi: core: Wake up the error handler when final completions race against each other

Race condition vulnerabilities were found in the Linux kernel's SCSI error handler wake-up logic. Memory ordering issues in scsidechostbusy and ordering problems in scsiehinchostfailed can cause the SCSI error handler to never wake up when command completions race against each other. This leaves...

PT-2026-78853

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 Description A heap-based buffer overflow in the Bluetooth AVRCP Profile protocol dissector can lead to a crash, resulting in a denial of service. Recommendations...

Microsoft Visual Studio Products (August 2026)

The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. CVE-2026-62871 - Unchecked input for loop condition in .NET allows an unauthorized...

PT-2026-78858

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 Description A NULL pointer dereference in the Bluetooth BR/EDR FHS protocol dissector can lead to a crash, resulting in a denial of service. Recommendations Update...

ROS-20260819-73-0051

The vulnerability in Tomcat10 is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

perl-Date-Manip security update

6.94-5.1 - Fix CVE-2026-60075: prevent quadratic-cost regex DoS in date/time parsing by rejecting overly long input strings Resolves: RHEL-239790...

UBUNTU-CVE-2026-75032

A flaw was found in BlueZ. Insufficient validation of packet length fi...

UBUNTU-CVE-2026-17084

The "stringprep" module didnt process characters from RFC 3454 tables...

UBUNTU-CVE-2026-63639

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8...

UBUNTU-CVE-2026-73502

kin-openapi is a Go project for handling OpenAPI files. From 0.2.0 unt...

ROS-20260819-73-0057

The vulnerability in Tomcat10 is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

PT-2026-78718

Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, the default io.netty.handler.ssl.SniHandler constructors use the pre-handshake ClientHello aggregation path in handler/src/main/java/io/netty/handler/ssl/SslClientHelloHandler.java at...

PT-2026-78848

Crash in the Wireshark dissection engine in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

UBUNTU-CVE-2026-53533

aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior...

UBUNTU-CVE-2026-63335

The RabbitMQ Java client library allows Java and JVM-based application...

PT-2026-78859

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 Description A crash in the Bluetooth HFP Profile protocol dissector allows for a denial of service. This is caused by an out-of-bounds read, which occurs when the...