ALSA-2026:59241 Important: python-pyasn1 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

CVE-2026-34959: Improper Input Validation

Adminer 4.6.0 before 5.5.0 prepends the client-supplied X-Forwarded-Prefix header to $SERVER"REQUESTURI" with no trusted-proxy check and no validation of the prefix value. An attacker can supply an absolute URL e.g. X-Forwarded-Prefix: https://evil.example that flows into Location redirect header...

Ekushey Project Manager CRM 5.0 Cross Site Scripting

A persistent cross site scripting vulnerability was identified in Ekushey Project Manager CRM version 5.0. The issue was found in the application settings, specifically the Name field. CVE-2026-26211 — Stored XSS in Ekushey Project Manager CRM Product: Ekushey Project Manager CRM Version: 5.0...

CVE-2026-16434: Improper Input Validation

Adminer 4.6.0 through 5.5.0 fixed in 5.5.1 contains an incomplete fix for a prior X-Forwarded-Prefix vulnerability GHSA-8478-xrj3-h9c2. The validation guard bootstrap.inc.php only rejects prefixes matching ^/^/, blocking //evil.com but allowing values such as /\evil.com whose second character is ...

CVE-2026-79106: Improper Input Validation

Improper input validation in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

PT-2026-89505

Name of the Vulnerable Software and Affected Versions Tesseract versions 5.5.3 and earlier Description A heap out-of-bounds write occurs during the first recognition step on the default LSTM engine when processing a crafted NT LSTM layer. This happens because NetworkIO::WriteTimeStepPart and...

CVE-2026-79230: Improper Input Validation

Improper input validation in ANGLE in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

Linux HyperV Guest Mode Driver Use-After-Free

The vulnerability of the mshvpartitioncreateregion function in the drivers/hv/mshvrootmain.c file of the Microsoft HyperV kernel driver for Linux operating systems is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the...

Linux HID Magicmouse DoS

The vulnerability in the magicmousereportfixup function within the drivers/hid/hid-magicmouse.c file of the kernel’s user interface subsystem driver is related to a resource leak that occurs after the actual expiration of its usage period. Exploitation of this vulnerability may allow an attacker ...

Linux kernel USB network adapter driver DoS

The vulnerability in the kalmiabind function within drivers/net/usb/kalmia.c of the Linux kernel USB network adapter driver is related to insufficient input validation. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux kernel USB Network DoS

The vulnerability in the kawethprobe function within the drivers/net/usb/kaweth.c file of the Linux kernel’s USB network adapter driver is related to improper validation of input data consistency. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux BPF Heap Buffer Overflow DoS

The vulnerability of the btffuncprotocheck function in the kernel/bpf/btf.c module, which is part of the Linux kernel’s BPF support, relates to incorrect checking of the type of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel ext2_fill_super Heap Buffer Overflow DoS

The vulnerability of the ext2fillsuper function in the fs/ext2/super.c module of the Linux kernel file system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel S390 DoS

The vulnerability in the dosyscall function within the arch/s390/kernel/syscall.c module for the S390 platform in the Linux kernel is related to insufficient input validation. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux Ext4 Heap Buffer Overflow DoS

The vulnerability in the ext4featuresetok function within the fs/ext4/super.c file of the Ext4 filesystem in the Linux kernel is related to improper validation of input data consistency. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and...

PT-2026-81790

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in ANGLE, a graphics abstraction layer, allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to visit a...

EulerOS Virtualization 2.13.0 : python3 (EulerOS-SA-2026-3235)

According to the versions of the python3 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : User-controlled header names and values containing newlines can allow injecting HTTP headers.CVE-2026-0865 Tenable has extracted t...

RHEL 9 : python-pyasn1 (RHSA-2026:59242)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59242 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

Wazuh Server 4.0.0 < 4.14.6 Multiple Vulnerabilities

The version of Wazuh Server on the remote host is at least 4.0.0 and prior to 4.14.6. It is, therefore, affected by multiple vulnerabilities, including: - cluster.unmergeinfo constructs paths from peer-controlled mergetype and name values in a merged synchronization archive. A cluster peer holdin...

Linux Distros Unpatched Vulnerability : CVE-2026-56704

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Adminer before 5.4.3 inserts unsanitized database server version strings into script tags with valid CSP nonces without proper validation. Attackers controlling...