50303 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-76924
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Kerberos protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76924 Note that Nessus relies on the presence of the...
Linux Distros Unpatched Vulnerability : CVE-2026-76222
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.1.58 fails to validate submodule names from .gitmodules files, allowing attackers to create Git repositories at arbitrary filesystem paths...
PT-2026-79082
Mongoose is an embedded web server and network library. Prior to 7.22, a remote attacker can place a lone carriage return or line feed in multipart input processed by mg http next multipart in src/http.c. The loops comparing sb and sb + 1, and sh2 and sh2 + 1, use an incorrect AND condition and...
Important: perl-Date-Manip security update
Date::Manip is a series of modules designed to make any common date/time operation easy to do. Operations such as comparing two times, determining a data a given amount of time from another, or parsing international times are all easily done. It deals with time as it is used in the Gregorian...
RHEL 8 : perl-Date-Manip (RHSA-2026:57562)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:57562 advisory. Date::Manip is a series of modules designed to make any common date/time operation easy to do. Operations such as comparing two times, determining a...
Linux Distros Unpatched Vulnerability : CVE-2026-76921
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76921 Note that Nessus relies on the presence of the packag...
PT-2026-79134
A single crafted SSH message gives an unauthenticated network attacker an out-of-bounds stack write of attacker-controlled length and content against any application built on swift-nio-ssh. This vulnerability is addressed in swift-nio-ssh version 0.14.1...
Linux Distros Unpatched Vulnerability : CVE-2026-19582
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In binutils 2.46.1 and prior versions, a victim who opens a crafted PE file using binutils could execute arbitrary code unknowningly via a stack buffer overflow...
PT-2026-79143
Name of the Vulnerable Software and Affected Versions libvips versions prior to 8.18.3 Description The old-style Radiance RLE Run-Length Encoding decoder in libvips/foreign/radiance.c contains a flaw where it can process a repeat marker at the start of a scanline in the scanline read old function...
perl-Date-Manip security update
6.60-3.1 - Fix CVE-2026-60075: prevent ReDoS via crafted strings with long interior whitespace runs in date/time parsing - Resolves: RHEL-239807...
PT-2026-79268
Name of the Vulnerable Software and Affected Versions SPIP versions prior to 4.4.20 Description Unauthenticated remote attackers can execute arbitrary code due to the incorrect identification of ?php blocks and the mishandling of certain cases, such as the presence of a character, within the var...
Security update for ctop (important)
openSUSE Security Update: Security update for ctop Announcement ID: openSUSE-SU-2026:0292-1 Rating: important References: 1248710 1257431 1265800 1266632 1267805 Cross-References: CVE-2022-21698 CVE-2024-45310 CVE-2026-10722 CVE-2026-33814 CVE-2026-39821 CVSS scores: CVE-2022-21698 SUSE: 7.5...
GNU Emacs: Arbitrary code execution
Background GNU Emacs is the extensible, customizable, self-documenting real-time display editor. Description A vulnerability has been discovered in GNU Emacs. Please review the CVE identifier referenced below for details. Impact An attacker could achieve arbitrary code execution by tricking a use...
Oracle Linux 10 : perl-Date-Manip (ELSA-2026-56971)
The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-56971 advisory. 6.94-5.1 - Fix CVE-2026-60075: prevent quadratic-cost regex DoS in date/time parsing by rejecting overly long input strings Resolves: RHEL-239790 Tenable has...
MiracleLinux 9 : p11-kit-0.26.4-1.el9_8 (AXSA:2026-1590:02)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1590:02 advisory. p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing CVE-2026-13757 Tenable has extracted the preceding description block directly from...
CVE-2026-18297: Stack-based Buffer Overflow
GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. User interaction is required to exploit this vulnerability in that the target must visit a...
AZL-96782 CVE-2026-76927 affecting package wireshark 4.4.7-2
H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
CVE-2026-76921
CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...