Linux Distros Unpatched Vulnerability : CVE-2026-109448

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer wraparound in psqlODBC SQLBindParameter allows an application, or an attacker who controls how many parameters the application binds on one statement, t...

PT-2026-120493

In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component is vulnerable to a pre-authentication remote denial of service. When processing the initial 4-byte length field of an incoming TCP connection, an integer overflow in MessageBuffer::computeRequiredCapacity causes the receiving...

PT-2026-120494

In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component fails to perform cross-field validation on attacker-controlled size, paddingSize, and dataOffset fields during DataDescriptor message deserialization. An unauthenticated remote attacker can send a crafted network payload that...

Gitlab -- vulnerabilities

Gitlab reports: Integer Overflow issue in Regular Expression Compiler impacts GitLab CE/EE Improper Authentication issue in OmniAuth-to-LDAP auto-linking email lookup impacts GitLab CE/EE Cache Poisoning issue in OAuth/OIDC discovery endpoints impacts GitLab CE/EE Improper Access Control issue in...

Linux Distros Unpatched Vulnerability : CVE-2026-109730

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird...

Linux Distros Unpatched Vulnerability : CVE-2026-109723

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

SUSE SLES15 Security Update : python-hpack (SUSE-SU-2026:4593-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4593-1 advisory. This update for python-hpack fixes the following issue: - CVE-2026-59980: unbounded variable integer decoding can cause run-away computation...

Rocky Linux 9 [CIQ] Security Update: xorg-x11-server-Xdmx / xorg-x11-server-Xdmx-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_84574)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202684574 advisory. xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling CVE-2026-93516 xorg-x11-server: xorg-x11-server:...

php security update

8.0.30-8.1 - Fix FILTERSANITIZEENCODED does not encode 0xFF - Fix IPv6 ACL bypass in FastCGI listen.allowedclients due to partial address comparison CVE-2026-91768 - Fix Various packet overreads in mysqlnd wire protocol CVE-2025-1218 - Fix TLS hostname verification falls back to CN after SAN...

SUSE SLES15: apache2-mod_php8 / php8 / php8-bcmath / php8-bz2 / php8-calendar / etc (SUSE-SU-2026:4603-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4603-1 advisory. - CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser bsc1282981. - CVE-2025-14181:...

ROS-20261021-73-0038

The vulnerability in poppler is related to integer overflow. Exploitation of this vulnerability can be carried out remotely...

PT-2026-120800

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 7.0 through 18.11.12 GitLab CE/EE versions 19.0 through 19.0.9 GitLab CE/EE versions 19.1 through 19.1.8 GitLab CE/EE versions 19.2 through 19.2.8 GitLab CE/EE versions 19.3 through 19.3.5 GitLab CE/EE versions 19.4 throu...

PT-2026-120244

Vyper 0.3.4 through 0.5.0b1 computes the remaining blueprint size in create from blueprint by uint256 subtraction without first checking that code offset is below the blueprint's code size, so a huge offset wraps to a small positive value. An attacker controlling code offset can make a factory...

PT-2026-120171

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.32.1 Description A heap-based buffer overflow exists in the server-side rdpsnd channel. This occurs due to an integer wraparound in the rdpsnd server select format function during DVI ADPCM block-alignment arithmeti...

CentOS Linux 8.4 [TuxCare] Security Update: corosync / corosync-vqsim / corosynclib / corosynclib-devel / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1792591710)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1792591710 advisory. - Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack- based buffer overflow in...

Fedora 43 : perl-Net-IDN-Encode (2026-4aec7019eb)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4aec7019eb advisory. Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encodepunycode. This...

PT-2026-135965

Уязвимость модуля ksmbd реализации сервера SMB ядра операционной системы Linux связана с целочисленным переполнением. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

PT-2026-120531

Integer underflow and out-of-bounds read in the HTTP/2 server DATA frame parser in Apache bRPC allows an unauthenticated remote attacker to cause denial of service by sending a malformed DATA frame with the PADDED flag set and a zero-length payload. Root Cause: The HTTP/2 DATA frame handler...

Linux Distros Unpatched Vulnerability : CVE-2026-88833

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled...

SUSE SLES15: apache2-mod_php8 / php8 / php8-bcmath / php8-bz2 / php8-calendar / etc (SUSE-SU-2026:4602-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4602-1 advisory. - CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser bsc1282981. - CVE-2025-14181:...