...[ More ]

EVerest version 2025.9.0 suffers from an integer overflow in SdpPacket::parseheader that allows an attacker to trigger either an infinite loop TCP or stack buffer overflow TLS by sending a malformed SDP packet with a specially crafted length field. The vulnerability exists because the length fiel...

MiracleLinux 8 : gegl04-0.4.4-7.el8_10.1 (AXSA:2026-1747:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1747:02 advisory. gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing CVE-2026-18300 Tenable has extracted the preceding description block directl...

CVE-2026-48486: Integer Overflow or Wraparound

Signum Node is a HDD-mined cryptocurrency using an energy efficient and fair Proof-of-Commitment PoC+ consensus algorithm. Prior to version 3.9.9, an integer overflow in BlockServiceImpl.applyBlock allowed a miner to receive an arbitrarily inflated block reward by crafting a block with a negative...

PT-2026-85078

Signum Node is a HDD-mined cryptocurrency using an energy efficient and fair Proof-of-Commitment PoC+ consensus algorithm. Prior to version 3.9.9, an integer overflow in BlockServiceImpl.applyBlock allowed a miner to receive an arbitrarily inflated block reward by crafting a block with a negative...

CVE-2026-84965: Integer Overflow or Wraparound

An integer wraparound in an allocation size calculation in the BSON library's JSON parsing code can cause a buffer to be released while a following copy operation still writes through the stale pointer. On builds where sizes are 32 bits, an unauthenticated party able to supply a sufficiently larg...

ALSA-2026:63128 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Bluetooth: hcildisc: Clear HCIUARTPROTOINIT on error CVE-2026-53073 kernel: exfat: fix potential use-after-free in exfatfinddirentry CVE-2026-63808 kernel: KEYS: fix overflow in...

VMSA-2026-0007: VMware Workstation and Fusion updates address integer-overflow and buffer overflow vulnerabilities (CVE-2026-59346, CVE-2026-59347)

Advisory ID: | VMSA-2026-0007 ---|--- Advisory Severity: | Critical CVSSv3 Range: | 8.1-9.3 Synopsis: | VMware Workstation and Fusion updates address integer-overflow and buffer overflow vulnerabilities CVE-2026-59346, CVE-2026-59347 Issue date: | 2026-09-03 Updated on: | 2026-09-03 Initial...

MiracleLinux 8 : gegl-0.2.0-40.el8_10.1 (AXSA:2026-1746:02)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1746:02 advisory. gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing CVE-2026-18300 Tenable has extracted the preceding description block directl...

RockyLinux 8 : gegl (RLSA-2026:62425)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:62425 advisory. gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing CVE-2026-18300 Tenable has extracted the preceding description block directly fr...

RHEL 8 : gegl (RHSA-2026:62425)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:62425 advisory. GEGL Generic Graphics Library is a graph-based image processing framework. Security Fixes: gimp: gegl: GIMP: Remote code execution via integer...

openSUSE 16: emacs / emacs-el / emacs-eln / emacs-games / emacs-info / emacs-nox / etc (openSUSE-SU-2026:21711-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21711-1 advisory. Security issues fixed: - Arbitrary code execution when opening a specially crafted file bsc1275941. - CVE-2026-77219: integer overflow in the...

RockyLinux 8 : gegl04 (RLSA-2026:62420)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:62420 advisory. gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing CVE-2026-18300 Tenable has extracted the preceding description block directly fr...

Oracle Linux 8 : ELSA-2026-62144-0: / wget (ELSA-2026-621440)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-621440 advisory. - Fix CVE-2026-58469: buffer underflow in cleanmetalinkstring - Fix CVE-2026-58471: buffer overflow in convertfname - Fix CVE-2026-58472: integer and...

TencentOS Server 3: gimp:2.8 (TSSA-2026:0972)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0972 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

AlmaLinux 9 : gimp (ALSA-2026:61587)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:61587 advisory. gimp: GIMP: Arbitrary code execution in PSD plugin due to unsigned underflow CVE-2026-59090 gimp: GIMP: Arbitrary code execution via crafted TIF file...

AlmaLinux 8 : gimp:2.8 (ALSA-2026:62507)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:62507 advisory. gimp: gimp: Stack buffer overflow in pnmscannergettoken CVE-2026-58380 gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on...

CLSA-2026-1788381510 spice-vdagent: Fix of 2 CVEs

Fix CVE-2026-57965 - integer overflow in udscswrite buffer size calculation...

GO-2026-6310 Klever: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token) in github.com/klever-io/klever-go

Klever: Integer overflow in split-royalty validation enables unbounded minting of KLV native token in github.com/klever-io/klever-go...

GO-2026-6330 klever-go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupply in github.com/klever-io/klever-go

klever-go: SFT add-quantity int64 overflow bypasses a finite per-nonce MaxSupply in github.com/klever-io/klever-go...

CSRF (Cross-Site Request Forgery) nanoid Dependency in Jira Software Data Center

This High severity CSRF Cross-Site Request Forgery vulnerability was introduced in versions 10.1.1, 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Software Data Center. This CSRF Cross-Site Request Forgery vulnerability, with a CVSS Score of 7.4 and a...