Apache bRPC buffer error vulnerability

Versions of Apache bRPC prior to 1.18.0 contain a buffer error vulnerability. This vulnerability arises because the Discovery naming service reply parser fails to validate whether JSON values represent objects before invoking the RapidJSON accessor, which is designed solely for objects. When...

Apache bRPC resource management error vulnerability

Versions of Apache bRPC prior to 1.18.0 contain a resource management error vulnerability. This vulnerability arises because the stream message reassembly path does not limit the cumulative size of fragmented messages upon resending them. Remote attackers can send an infinite stream of resending...

Michelle Tilley TOML Parser for Node.js resource management error vulnerability

Michelle Tilley: Versions of the TOML Parser for Node.js prior to 5.0.1 contain a resource management error vulnerability. This vulnerability arises because the addTableArray function in lib/compiler.js re-scans the entire set of assignedPaths and valueAssignments records for each array table...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: rabbitmq-java-client (UTSA-2026-142340)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142340 advisory. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. maxBodyLebgth was not used when receiving...

Amazon Linux 2023 : device-mapper-persistent-data (ALAS2023-2026-3217)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3217 advisory. Fix RUSTSEC-2026-0190: Unsoundness in Error::downcastmut Tenable has extracted the preceding description block directly from the tested product security advisory. Note that Nessus has not tested for th...

Atlassian Confluence 7.2.x < 9.2.26 / 9.3.x < 10.2.19 / 11.0.0 (CONFSERVER-104511)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104511 advisory. - Off-by-one Error vulnerability in Apache Tomcat impacting the N flag on the rewrite valves causes rewrite processing to restart at the second rul...

Linux Distros Unpatched Vulnerability : CVE-2026-113239

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Range error in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a...

PHP resource management error vulnerability

Versions prior to PHP 8.2.35, versions prior to PHP 8.3.36, versions prior to PHP 8.4.27, and versions prior to PHP 8.5.12 contain a security vulnerability. This vulnerability arises when longjmp is used to handle an out-of-memory error, causing the current context to exit and terminate requests...

Vyper input validation error vulnerability

Vyper versions prior to 0.3.1 contain an input validation error vulnerability. This stems from the absence of a uint8 type, allowing interface returns declared as uint8—such as ERC20.decimals—to be stored in uint256 variables without boundary checks. Malicious contracts can then return values...

Amazon Linux 2023 : loupe (ALAS2023-2026-3216)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3216 advisory. Fix RUSTSEC-2026-0221: event-listener allows !Send tags to cross thread boundaries via StackSlot Fix RUSTSEC-2026-0186: Unchecked pointer offset in crate memmap2 Fix RUSTSEC-2026-0190: Unsoundness in...

Linux Distros Unpatched Vulnerability : CVE-2026-110036

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service DoS by inducing a user or system tool to process crafted devic...

SUSE CVE-2026-98722

In the Linux kernel, the following vulnerability has been resolved: mtd: block2mtd: Fix divide error when erasesize is zero The erase size is parsed from the "block2mtd" module parameter and can be set to zero. adddevice then evaluates if size % erasesize with a zero divisor, which triggers a...

dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...

dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...

dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-113239

Range error in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...

dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...

dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...

dotnet8.0: dotnet10.0: dotnet9.0: dotnet: .NET Security Feature Bypass Vulnerability

Origin validation error in .NET allows an unauthorized attacker to bypass a security feature over a network...