PT-2026-71656

Name of the Vulnerable Software and Affected Versions rsync versions 3.0.1 through 3.4.x Description An out-of-bounds write exists in the read args function. A malicious sender can corrupt adjacent heap memory by providing a crafted argument list. This occurs when the argument count fills the arg...

PT-2026-71658

Name of the Vulnerable Software and Affected Versions rsync versions 3.0.0 through 3.4.x Description An out-of-bounds write occurs when triggering HLINK BUMP processing on file entries that have the FLAG HLINKED flag set while the hard-link preservation option is inactive. This happens because th...

PT-2026-71467

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description A heap buffer overflow occurs in the to chartimestamptz...

PT-2026-71661

Name of the Vulnerable Software and Affected Versions rsync versions 3.2.5 through 3.4.x Description A heap out-of-bounds write allows remote unauthenticated attackers to write one attacker-controlled byte past the end of a heap allocation. This occurs when a crafted files-from entry containing...

Vulnerability in core server (CVE-2026-14670)

PostgreSQL plperl tied object heap buffer overflow executes arbitrary code Heap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute arbitrary code as the operating system user running the database, via a crafted function body. Versions before PostgreSQL...

Vulnerability in core server (CVE-2026-14664)

PostgreSQL regexp heap buffer overflow executes arbitrary code Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding validation. This shares heritage with CVE-2026-2006,...

openSUSE 16 Security Update : nodejs24 (openSUSE-SU-2026:21546-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21546-1 advisory. Update to 24.18.1. - CVE-2026-54272: ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses allows for bypass of SSRF and trust-...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.3.1.14)

The version of AOS installed on the remote host is prior to 7.3.1.14. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.3.1.14 advisory. - A flaw was found in gnutls. Servers configured with RSA-PSK RivestShamirAdleman Pre-Shared Key wrongfully matched usernam...

RHEL 10 : gstreamer1-plugins-bad-free (RHSA-2026:54659)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:54659 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package...

Linux Distros Unpatched Vulnerability : CVE-2026-14670

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute arbitrary code as the operating system user running the...

Security Updates for Microsoft Word Products C2R (August 2026)

The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. CVE-2026-58651, CVE-2026-64915 - Stack-based buffer overflow in Microsof...

Linux Distros Unpatched Vulnerability : CVE-2026-29035

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CivetWeb commit 4a4f0c95 contains a heap and stack buffer overflow vulnerability in the readwebsocket function that allows unauthenticated remote attackers to...

openSUSE 16: libunbound8 / python3-unbound / unbound / unbound-anchor / etc (openSUSE-SU-2026:21550-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21550-1 advisory. Update to version 1.25.2. Security issues fixed: - CVE-2026-14586: DoS via assertion in libngtcp2 for DNS-over-QUIC environments with high...

Linux Distros Unpatched Vulnerability : CVE-2026-19385

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap buffer overflow in PostgreSQL pgdump of long function transform lists allows an object creator to execute arbitrary code as the operating system user runni...

Alibaba Cloud Linux 3 : 0256: mingw-glib2 (ALINUX3-SA-2026:0256)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0256 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-14087: A flaw was found in GLib...

FFmpeg 0.5 < 9.0 Multiple Vulnerabilities

The version of FFmpeg installed on the remote host is 0.5 or later but prior to 9.0. It is, therefore, affected by multiple vulnerabilities: - A signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsubparser.c allows attackers to trigger a heap buffer overflow by...

SUSE SLES15: himmelblau / himmelblau-sshd-config / himmelblau-sso / etc (SUSE-SU-2026:3576-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3576-1 advisory. Security fixes: - CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow short buffers on OpenSSL 1.1.1...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-11.2)

The version of AHV installed on the remote host is prior to 11.2. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-11.2 advisory. - A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elfswapshdr in the library bfd/elfcode....

PT-2026-71421

In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data. A remote, unauthenticated attacker with access to the affected service could trigger a heap-based buffer overflow, resulting in a denial of service...

FFmpeg 4.4 < 9.0 Out-of-Bounds Heap Write (CVE-2026-70632)

The version of FFmpeg installed on the remote host is 4.4 or later but prior to 9.0. It is, therefore, affected by an out-of-bounds heap write vulnerability: - An out-of-bounds heap write vulnerability in the native GoPro CineForm HD CFHD decoder allows remote attackers to corrupt heap memory by...