Ffmpeg Image Toolkit - Highly critical - Remote Code Execution - SA-CONTRIB-2026-220

This module enables you to use ffmpeg for image conversion The module doesn't sufficiently sanitize file names passed to the ffmpeg cli tool. This vulnerability is mitigated by the fact that an attacker must be able to upload images on the site...

PT-2026-120799

A flaw was found in OpenSCAP. When decomposing a Source DataStream SDS file, the application does not properly validate relative file path attributes, leading to a path traversal vulnerability. An attacker can exploit this flaw by tricking a user or automated system into decomposing a crafted...

Red Hat: CVE-2026-85518: openscap: openscap: Arbitrary file write via path traversal in Source DataStream decomposition

A flaw was found in OpenSCAP. When decomposing a Source DataStream SDS file, the application does not properly validate relative file path attributes, leading to a path traversal vulnerability. An attacker can exploit this flaw by tricking a user or automated system into decomposing a crafted...

oretnom23 file-management-system-php input validation error vulnerability

The oretnom23 file-management-system-php versions 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4 and earlier contain a security vulnerability. This vulnerability stems from improper handling of the fid/id parameter in the files.php component within the File Management module, potentially leading to SQL...

CVE-2025-60476

The GPAC Project/MP4Box software (versions prior to 2.5 ) is vulnerable to a heap use-after-free condition within the gf_odf_ac4_cfg_clean_list function located in /odf/descriptors.c. This flaw can be triggered by an attacker providing a crafted AC4 file , potentially resulting in a Denial of Ser...

Red Hat Enterprise Linux resource management error vulnerability

Red Hat Enterprise Linux contains a resource management error vulnerability. This vulnerability arises because, in builds where rpmio is enabled, the custom reader handler fails to limit the cumulative size after decompression prior to parsing. An attacker can supply a highly compressible YAML...

oretnom23 file-management-system-php input validation error vulnerability

The oretnom23 file-management-system-php contains an input validation error vulnerability. This vulnerability arises because the include function in the index.php file processes the ‘page’ parameter, resulting in file inclusion and potential remote exploitation...

CVE-2025-60476

A heap use-after-free in the gfodfac4cfgcleanlist function /odf/descriptors.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...

Red Hat Confidential Compute Attestation resource management error vulnerability

Red Hat Confidential Compute Attestation version 1 contains a resource management error vulnerability. This vulnerability arises because storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer leak file descriptors when processing corrupted or malicious input. Unrestricted repeated calls may...

EUVD-2025-211165

A NULL pointer dereference in the gfac4presentationchmode function /mediatools/avparsers.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...

PT-2026-120908

This theme provides a front-end design for transparency and open-government sites, including a table preview of CSV files attached to content. The theme doesn't sufficiently check file access when it renders that preview. It reads the file directly, so a visitor who may view the content, but whos...

CVE-2025-60487

A segmentation violation in the gfisomgetesd function /isomedia/isomread.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted XML file...

CVE-2025-60497

A segmentation violation in the GetESD function /isomedia/track.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2025-60476

A heap use-after-free in the gfodfac4cfgcleanlist function /odf/descriptors.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...

CVE-2025-60478

A use-after-free in the gffilterpacketdestroy function /filtercore/filterpck.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...

Linux Distros Unpatched Vulnerability : CVE-2026-109782

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox ESR 153.5 and Thunderbird 153.5. CVE-2026-109782 Note that Nessus reli...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: flatpak (UTSA-2026-142354)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142354 advisory. A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via extractextradata. On system...

Linux Distros Unpatched Vulnerability : CVE-2026-92183

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...

Linux Distros Unpatched Vulnerability : CVE-2026-112935

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - filelock is a platform-independent file lock for Python. From 3.22.0 until 4.2.1, SoftFileLock can break a stale marker after an attacker frees its own marker...

Linux Distros Unpatched Vulnerability : CVE-2026-114236

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls can...