22091 matches found
Oracle Linux 10 : rsync (ELSA-2026-6825)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-6825 advisory. - Resolves: RHEL-152885 - CVE-2025-10158 Out of bounds array access via negative index Tenable has extracted the preceding description block directly from the...
Mageia: Security Advisory (MGASA-2026-0084)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 10 : rsync (RHSA-2026:6825)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:6825 advisory. The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only...
CVE-2026-35444 SDL_image has a heap buffer overflow READ via unchecked colormap index in XCF loader
SDLimage is a library to load images of various formats as SDL surfaces. In dolayersurface in src/IMGxcf.c, pixel index values from decoded XCF tile data are used directly as colormap indices without validating them against the colormap size cmnum. A crafted .xcf file with a small colormap and...
EUVD-2026-19406
Index out-of-range when encountering a branch page with zero elements in go.etcd.io/bbolt...
Withdrawn Advisory: go.etcd.io/bbolt affected by index out-of-range vulnerability
Withdrawn Advisory This advisory has been withdrawn because its CVE Numbering Authority has determined this issue to be a false positive. This link is maintained to preserve external references. Original Description Index out-of-range when encountering a branch page with zero elements in...
GHSA-6JWV-W5XF-7J27 Withdrawn Advisory: go.etcd.io/bbolt affected by index out-of-range vulnerability
Withdrawn Advisory This advisory has been withdrawn because its CVE Numbering Authority has determined this issue to be a false positive. This link is maintained to preserve external references. Original Description Index out-of-range when encountering a branch page with zero elements in...
CVE-2026-33817
Rejected reason: CVE confirmed to be a false positive...
DEBIAN-CVE-2026-33817
Index out-of-range when encountering a branch page with zero elements in go.etcd.io/bbolt...
CVE-2026-33817
Rejected reason: CVE confirmed to be a false positive...
UBUNTU-CVE-2026-33817
Index out-of-range when encountering a branch page with zero elements in go.etcd.io/bbolt...
CVE-2026-33817 Vulnerability in go.etcd.io/bbolt
Index out-of-range when encountering a branch page with zero elements in go.etcd.io/bbolt...
CVE-2026-33817
Index out-of-range when encountering a branch page with zero elements in go.etcd.io/bbolt...
CVE-2026-33817
Removed by vendor...
GO-2026-4923 WITHDRAWN: out-of-range-index in go.etcd.io/bbolt
This report has been withdrawn with reason: "Reporter and maintainer have confirmed this as false positive". Index out-of-range when encountering a branch page with zero elements in go.etcd.io/bbolt...
Updated xz packages fix security vulnerability
Buffer overflow in lzmaindexappend. CVE-2026-34743...
MGASA-2026-0084 Updated xz packages fix security vulnerability
Buffer overflow in lzmaindexappend. CVE-2026-34743...
Security Bulletin: Vulnerabilities in llama_index_core bundled with IBM Fusion, IBM Fusion HCI and Content-Aware Storage.
Summary IBM Fusion, IBM Fusion HCI and Content-Aware Storage includes llamaindexcore which could allow Denial of Service DoS, steal proprietary models, poison cached embeddings, conduct symlink attacks. CVE-2025-5472, CVE-2024-12911, CVE-2024-12704, CVE-2025-5302, CVE-2025-7647. Vulnerability...
How LiteLLM Turned Developer Machines Into Credential Vaults for Attackers
The most active piece of enterprise infrastructure in the company is the developer workstation. That laptop is where credentials are created, tested, cached, copied, and reused across services, bots, build tools, and now local AI agents. In March 2026, the TeamPCP threat actor proved just how...