492263 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-115572
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an attacker can craft a PDF that repeatedly references the same nonexistent indirect...
Amazon Linux 2 : docker (ALASDOCKER-2026-152)
The version of docker installed on the remote host is prior to 25.0.18-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-152 advisory. The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer...
Important: mariadb1011
Issue Overview: MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory. A database user with the...
Important: mariadb123
Issue Overview: MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory. A database user with the...
Important: mariadb114
Issue Overview: MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory. A database user with the...
BeyondTrust Remote Support 26.2.3 Internal Message Origin Validation
BeyondTrust Remote Support version 26.2.3 and earlier contains an internal-message origin-validation issue that could allow a remote attacker to perform file operations on an affected appliance...
Important: qemu
Issue Overview: hw/display/qxl: validate primary surface stride against width CVE-2026-16271 hw/usb/hcd-xhci: Set reentrancy guard in timer functions CVE-2026-17588 hw/display/vga: fix text-mode OOB write after a graphics surface switch CVE-2026-77913 io/channel-socket: do not treat a zero length...
Linux Distros Unpatched Vulnerability : CVE-2026-115722
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RPly through 1.1.4 contains an improper array index validation vulnerability in plyreadheaderproperty that accepts list as a list property's length or value typ...
CVE-2026-112907
On Windows the soft locks "SoftFileLock", "MarkerSoftFileLock", "SoftFileLease", their async forms, and a "FileLock" that fell back to a soft lock read their marker by path. The marker is the lock file whose presence says a process holds the lock. Each "acquire" attempt that finds a marker opens ...
CVE-2026-112913
On Windows, "ReadWriteLock" and "AsyncReadWriteLock" the SQLite-backed reader/writer lock connect SQLite to the lock database by its path, in every directory. SQLite derives three side files from that path: "-journal", the rollback journal pages saved to undo an interrupted write; "-wal", the...
SUSE CVE-2026-98975
In the Linux kernel, the following vulnerability has been resolved: xfs: stop exchanging reflink flags when exchanging mappings When an exchange covers both files from offset 0 to idisksize, xmicanexchangereflinkflags assumes every mapping moved and hands the reflink flag over to the other file...
SUSE CVE-2026-99052
In the Linux kernel, the following vulnerability has been resolved: selinux: preserve NATIVELABELS on already-initialized sb in setmntopts When an NFSv4 filesystem exported with securitylabel is mounted a second time, sgetfc returns the existing superblock and nfsgetroot calls securitysbsetmntopt...
Exploit for Path Traversal in Fortinet Fortimail
fortimail-cve-2026-104286-check Standalo...
Exploit for CVE-2026-21589
atlassian-cve-2026-21589-check Standalo...
Exploit for Authentication Bypass by Spoofing in Beyondtrust Remote_Support
beyondtrust-remote-support-cve-2026-102764-check...
SUSE CVE-2026-114609
fpdf2 is a PDF creation library for Python. Prior to 2.8.8, fpdf2's shared image loader automatically dereferences attacker-controlled HTTPS URLs and raw local paths supplied through FPDF.image, FPDF.writehtml HTML values, SVG or xlink:href values, and template image fields. This can cause outbou...
CLSA-2026-1786360814 avahi: Fix of 3 CVEs
CVE-2025-59529: limit local simple-protocol clients to prevent memory and file descriptor exhaustion...
CVE-2026-115931
Postiz lets a signed-in user ask the backend to run a function on one of their connected channels. The backend did not restrict which functions can be requested, so a user could call internal helper functions that were never meant to be reachable from the web interface. One of those helpers reads...