39630 matches found
Security Updates for Microsoft Word Products C2R (August 2026)
The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. CVE-2026-58651, CVE-2026-64915 - Stack-based buffer overflow in Microsof...
Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-11.2)
The version of AHV installed on the remote host is prior to 11.2. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-11.2 advisory. - A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elfswapshdr in the library bfd/elfcode....
PT-2026-71421
In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data. A remote, unauthenticated attacker with access to the affected service could trigger a heap-based buffer overflow, resulting in a denial of service...
Security Updates for Microsoft Access Products C2R (August 2026)
The Microsoft Access Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally. CVE-2026-64906, CVE-2026-64908, CVE-2026-64914, CVE-2026-64920 -...
Vulnerability in core server (CVE-2026-14669)
PostgreSQL tochar heap buffer overflow executes arbitrary code Heap buffer overflow in PostgreSQL tochartimestamptz allows the party choosing the timezone to execute arbitrary code as the operating system user running the database, via a long POSIX timezone abbreviation. Versions before PostgreSQ...
GLSA-202608-02 : FreeType: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202608-02 FreeType: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in FreeType. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly...
CVE-2026-38752 affecting package busybox for versions less than 1.36.1-26
CVE-2026-38752 affecting package busybox for versions less than 1.36.1-26. A patched version of the package is available...
CVE-2026-26199 affecting package hdf5 for versions less than 1.14.6-4
CVE-2026-26199 affecting package hdf5 for versions less than 1.14.6-4. A patched version of the package is available...
CVE-2026-59844 affecting package libssh for versions less than 0.10.6-9
CVE-2026-59844 affecting package libssh for versions less than 0.10.6-9. A patched version of the package is available...
CVE-2026-15037 affecting package qtbase for versions less than 6.6.3-5
CVE-2026-15037 affecting package qtbase for versions less than 6.6.3-5. A patched version of the package is available...
CVE-2026-73493 http4s-blaze-server: Unbounded WebSocket message aggregation
Http4s http4s-blaze-server is a minimal, idiomatic Scala interface for HTTP services. Prior to 0.23.18 and 1.0.0-M42, http4s-blaze-server aggregates fragments of an incoming WebSocket message with no limit on total size or fragment count. A client that completes a WebSocket handshake can send an...
CVE-2026-64290
creationtimestamp| type| source ---|---|--- 2026-08-12 20:45:19+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806...
CVE-2026-64280
creationtimestamp| type| source ---|---|--- 2026-08-12 20:45:16+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260806...
GHSA-6J7F-8JJP-MM8C vulnerabilities
Vulnerabilities for packages: libssh...
GHSA-MQ2J-7VQ4-77M8 vulnerabilities
Vulnerabilities for packages: libssh...
CVE-2026-59851 vulnerabilities
Vulnerabilities for packages: libssh...
GHSA-FVWJ-J79Q-57V7 vulnerabilities
Vulnerabilities for packages: libssh...
CVE-2026-59848 vulnerabilities
Vulnerabilities for packages: libssh...