CVE-2026-79902: Integer Overflow or Wraparound

A flaw was found in the Seattle FilmWorks plugin in GIMP. When processing a specially crafted SFW image file, the plugin allocates a Variable-Length Array VLA on the stack without integer overflow checks, causing an unbounded stack allocation. This issue leads to an application crash, resulting i...

Linux Distros Unpatched Vulnerability : CVE-2026-80574

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: focaltech - fix array out-of-bounds in focaltechprocessrelpacket Make finger2 and also finger1 unsigned, so that if the finger index in the packet is 0...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-104756)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104756 advisory. Heap buffer overflow in PostgreSQL pgdump of long function transform lists allows an object creator to execute arbitrary code as the operating system user running...

The vulnerability of the evtag_unmarshal_header() function in the Libevent asynchronous event notification library allows a attacker to cause a service failure.

The vulnerability of the evtagunmarshalheader function in the Libevent asynchronous event notification library is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures...

SUSE SLED15 / SLES15 Security Update : vim (SUSE-SU-2026:3680-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3680-1 advisory. - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service bsc1275018. -...

SUSE SLES12 Security Update : vim (SUSE-SU-2026:3677-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3677-1 advisory. - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service bsc1275018. - CVE-2026-73071: use-after-free in JSON...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093176)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093176 advisory. Heap-based buffer overflow in the pngcombinerow function in libpng before 1.5.21 and 1.6.x before 1.6.16, when running on 64-bit systems, might allow context-depende...

Linux Distros Unpatched Vulnerability : CVE-2026-78948

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098898)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098898 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes Reject invalid...

Oracle Linux 9 : httpd (ELSA-2026-59347)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59347 advisory. - Resolves: RHEL-190807 - httpd: use-after-free in modldap uldapconnectionfind via per-directory client cert list CVE-2026-29167 - Resolves: RHEL-192752 -...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: tmux (UTSA-2024-005632)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-005632 advisory. In tmux before version 3.1c the function inputcsidispatchsgrcolon in file input.c contained a stack- based buffer-overflow that can be exploited by terminal output...

Oracle Linux 8 : nginx:1.24 (ELSA-2026-59216)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-59216 advisory. - Resolves: RHEL-217957 - nginx:1.24/nginx: NGINX: Memory disclosure and denial of service in ngxhttpslicemodule CVE-2026-60005 - Resolves: RHEL-21930...

Fedora 44 : emacs (2026-60eff202e7)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-60eff202e7 advisory. Fix CVE-2026-77219: Integer overflow in PBM/PPM/PGM image loader. Tenable has extracted the preceding description block directly from the Fedora security...

CVE-2026-21807: Stack-based Buffer Overflow

HCL BigFix Quantum Risk Analyzer binary lacks several critical, industry-standard hardening protections that could allow an attacker to cause a stack-based buffer overflow...

AlmaLinux 9 : gstreamer1-plugins-good (ALSA-2026:59152)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:59152 advisory. gstreamer: GStreamer: Remote Code Execution via MRF file parsing heap-based buffer overflow CVE-2026-18296 gstreamer: GStreamer: Remote code execution vi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: rubygem-yajl-ruby (UTSA-2026-093638)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093638 advisory. yajl-ruby is a C binding to the YAJL JSON parsing and generation library. The 1.x branch and the 2.x branch of yajl contain an integer overflow which leads to...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098764)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098764 advisory. In the Linux kernel, the following vulnerability has been resolved: MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits Since commit...

FreeBSD : FreeBSD -- Multiple vulnerabilities in ppp(8) (204af099-a0ff-11f1-ae1f-bc241121aa0a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 204af099-a0ff-11f1-ae1f-bc241121aa0a advisory. ppp8 contained three memory safety errors in its handling of multilink endpoint discriminator...

AlmaLinux 8 : sqlite (ALSA-2026:58938)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:58938 advisory. sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data CVE-2026-11822 sqlite: SQLite: Arbitrary code execution and crash via...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098886)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098886 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Use kreallocarray in dalvectorreserve Why & How dalvectorreserve computes the...