EUVD-2026-63160

Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

EUVD-2026-63141

ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

EUVD-2026-63140

Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

PT-2026-96863

TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.20.1-tuxcare.2...

PT-2026-83655

Impact Feeding a KCL program that wraps an expression in deep, unnecessary parentheses triggers the parser’s recursive expression - unnecessarily bracketed - expression path. With enough nesting, the call stack grows until it exceeds the process stack limit, causing a stack overflow...

PT-2026-80224

Impact Affected versions of Winter CMS allow authenticated backend users with the following permissions to disclose arbitrary files readable by the PHP process by injecting @import inline "" directives into LESS source that the backend compiles. Four entry points share the same root cause: - Bran...

PT-2026-80782

Summary io.netty.incubator:netty-incubator-codec-bhttp uses attacker-controlled Binary HTTP variable-length integers as long values but accumulates them into int offsets. Large valid varint lengths wrap the internal offset negative, leading to unchecked ArrayIndexOutOfBoundsException /...

CVE-2026-54389: Allocation of Resources Without Limits or Throttling

Ghidra before 12.1.3 contains an uncontrolled resource consumption vulnerability in the PDB parser that allows attackers to terminate the Ghidra process by supplying a crafted PDB file with an oversized parameters section. The AbstractPdb deserialization routine reads all remaining parameters int...

PT-2026-96864

TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.20.0-tuxcare.2...

PT-2026-79259

Ghidra before 12.1.3 contains an uncontrolled resource consumption vulnerability in the PDB parser that allows attackers to terminate the Ghidra process by supplying a crafted PDB file with an oversized parameters section. The AbstractPdb deserialization routine reads all remaining parameters int...

Linux Distros Unpatched Vulnerability : CVE-2026-76926

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BUSMASTER file parser abnormal exit in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76926 Note that Nessus relies on the presence of the...

expat2 -- Out-of-bounds Read

https://github.com/libexpat/libexpat/pull/1331 reports: Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger memory corruption by processing XML with external entity parsers created via XMLExternalEntityParserCreate. A struct size mismatch between...

Linux Distros Unpatched Vulnerability : CVE-2026-76885

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tektronix K12xx file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76885 Note that Nessus relies on the presence of the...

Wireshark 4.6.x < 4.6.8 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.6.8. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.8 advisory. - Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76929 ...

Linux Distros Unpatched Vulnerability : CVE-2026-76884

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ERF file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76884 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2026-76929

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pcapng file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76929 Note that Nessus relies on the presence of the package as...

Linux Distros Unpatched Vulnerability : CVE-2018-1000644

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Eclipse RDF4j version 2.4.0 Milestone 2 contains a XML External Entity XXE vulnerability in RDF4j XML parser parsing RDF files that can result in the disclosure...

Linux Distros Unpatched Vulnerability : CVE-2026-68005

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...

Linux Distros Unpatched Vulnerability : CVE-2026-76883

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Catapult DCT2000 file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76883 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2026-76920

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - 3gpp phone log file parser crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76920 Note that Nessus relies on the presence of the...