PT-2026-78885

Name of the Vulnerable Software and Affected Versions binutils versions prior to 2.46.1 Description Opening a specially crafted PE Portable Executable file can lead to arbitrary code execution. This occurs due to a stack buffer overflow out of bounds write within the rsrc print name function...

PT-2026-79159

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A stack-based buffer overflow allows a local attacker to execute arbitrary code. A stack-based buffer overflow occurs when a program writes more data to a buffer located on...

The vulnerability of the PL/Per extension interface in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the PL/Per extension interface of the PostgreSQL database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of PL/Tcl and PL/Perl extensions of the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of PL/Tcl and PL/Perl extensions of the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-79054

jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to exhaust JVM heap memory by supplying a deeply nested XML document with uniquely-namespaced elements. The builder copies the entire inherited...

PT-2026-79230

Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description An integer overflow allows a remote attacker to cause a denial of service. An integer overflow occurs when an arithmetic operation attempts to create a numeric...

PT-2026-79144

Name of the Vulnerable Software and Affected Versions libvips versions prior to 8.18.3 Description Applications that define unusual custom sources and process untrusted uncompressed PPM images can trigger a max/min error in the vips source read to memory function within libvips/iofuncs/source.c...

PT-2026-79252

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A buffer overflow allows a remote attacker to execute arbitrary code. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is...

Linux Distros Unpatched Vulnerability : CVE-2026-77014

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libsoup's SoupServer HTTP Range header processing. The sortranges comparator in soup-message-headers.c truncates a 64-bit subtraction result...

RHEL 9 : kernel (RHSA-2026:57252)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:57252 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: netfilter: nfconntrackh323: f...

Security update for forgejo-cli (important)

openSUSE security update: security update for forgejo-cli ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21605-1 Rating: important References: bsc1242683 bsc1248047 bsc1274529 Cross-References: CVE-2025-3416 CVE-2025-55159 CVE-2026-25541 CVSS score...

Linux Distros Unpatched Vulnerability : CVE-2026-18917

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows...

CVE-2026-76918 Heap-based Buffer Overflow in Wireshark

SSH protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76918 Heap-based Buffer Overflow in Wireshark

SSH protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76918

CVE-2026-76918 is a heap-based buffer overflow in the SSH protocol dissector of Wireshark , affecting versions 4.6.0–4.6.7 and 4.4.0–4.4.18 . A local attacker who can convince a user to open a crafted packet capture file or capture traffic from a malicious network can trigger a crash of the Wires...

CVE-2026-76917 Heap-based Buffer Overflow in Wireshark

Bluetooth AVRCP Profile protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76917

A heap-based buffer overflow exists in the Bluetooth AVRCP (Audio/Video Remote Control Profile) protocol dissector in Wireshark versions 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 . A local user who processes a specially crafted Bluetooth AVRCP packet can trigger a crash of the Wireshark application, res...

CVE-2026-76879 Stack-based Buffer Overflow in Wireshark

C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

CVE-2026-76879

Wireshark's C12.22 protocol dissector contains a stack-based buffer overflow in versions 4.6.0–4.6.7 and 4.4.0–4.4.18. The flaw allows a remote, unauthenticated attacker to send crafted C12.22 protocol traffic causing the dissector to crash, resulting in denial of service (CVSS 7.5 HIGH, availabi...