46983 matches found
Vulnerability in core server (CVE-2026-14679)
PostgreSQL stack buffer overflow in argument match writes 0x0 and 0x1 to server memory Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count. The attack can write only 0x0 and 0x1 bytes. Versions before PostgreSQL...
CVE-2026-53793
rsync before 3.5.0 contains a path confinement bypass vulnerability that allows remote clients to escape the intended inner-module root confinement by constructing paths that resolve outside the chroot boundary when the module root contains a /./ boundary marker. Attackers can exploit improper...
CVE-2026-53803
rsync before 3.5.0 contains a symlink following vulnerability that allows local attackers to overwrite arbitrary files by placing a symlink at a predictable output path such as --log-file, --write-batch, or daemon-mode log and statistics paths. Attackers can exploit rsync's failure to reject...
CVE-2026-53796
rsync before 3.5.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability in the non-daemon receiver's destination directory handling that allows an attacker who can manipulate destination path parent components to redirect file writes to unintended locations. Attackers can...
CVE-2026-70456
rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the readargs function that allows a malicious sender to corrupt adjacent heap memory by sending a crafted argument list. When the argument count causes the argv allocation to be exactly full, the trailing NULL terminator is...
CVE-2026-70453
rsync before 3.5.0 contains an algorithmic complexity vulnerability in the hashsearch function that allows a remote attacker to cause a denial of service by delivering a carefully constructed file list. A sender can exploit the quadratic-time worst-case behavior in hash lookups to exhaust receive...
Linux Distros Unpatched Vulnerability : CVE-2026-18710
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A MongoDB driver component could write sensitive configuration information, including a credential used for outbound network connectivity, to application log...
openSUSE 16 Security Update : librest0_7 (openSUSE-SU-2026:21563-1)
The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21563-1 advisory. Changes in librest07: - CVE-2026-16615: Fix weak random number generation bsc1272399, glgoGNOME/librest!44. Tenable has extracted the preceding...
CVE-2026-64561 affecting package kernel for versions less than 6.6.150.1-1
CVE-2026-64561 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-64470 affecting package kernel for versions less than 6.6.145.2-1
CVE-2026-64470 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-71846
creationtimestamp| type| source ---|---|--- 2026-08-12 23:03:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7lhunq4xxei6a...
CVE-2026-73493
creationtimestamp| type| source ---|---|--- 2026-08-12 23:01:25+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mswackjquc27...
CVE-2026-71473
creationtimestamp| type| source ---|---|--- 2026-08-12 22:50:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cynmbvs3pdn47 2026-08-12 23:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mswabdewzc27...
CVE-2026-73501
creationtimestamp| type| source ---|---|--- 2026-08-12 22:40:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msw74epkjn2b 2026-08-12 23:00:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mswaavudbs2t...
CVE-2026-72795
creationtimestamp| type| source ---|---|--- 2026-08-12 22:20:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msw5ylszbj2p 2026-09-04 22:35:07+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-h6w7-xxcf-w2mq 2026-09-05 06:34:06+00:00| seen|...
CVE-2026-73500
etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a network attacker who can reach an etcd TLS listener can open many TCP connections and never send a ClientHello. In client/pkg/transport/listenertls.go, each connection handle...
CVE-2026-73418
creationtimestamp| type| source ---|---|--- 2026-08-12 22:01:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msw4wybcvq2u...
CVE-2026-19001
creationtimestamp| type| source ---|---|--- 2026-08-12 21:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msw37annab2e 2026-08-12 22:02:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msw4zemw7z2l 2026-08-13 12:45:10+00:00| seen|...
CVE-2026-73500
etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a network attacker who can reach an etcd TLS listener can open many TCP connections and never send a ClientHello. In client/pkg/transport/listenertls.go, each connection handle...