136631 matches found
PT-2026-78859
Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 Description A crash in the Bluetooth HFP Profile protocol dissector allows for a denial of service. This is caused by an out-of-bounds read, which occurs when the...
PT-2026-78842
Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 Description A NULL pointer dereference in the CMS protocol dissector can lead to a crash, resulting in a denial of service. Recommendations Update Wireshark version...
PT-2026-78864
Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 Description A NULL pointer dereference in the H.245 protocol dissector can lead to a crash, resulting in a denial of service. A protocol dissector is a software...
PT-2026-93227
Pwn2Own Home Assistant Green Simple Service Discovery Protocol Server-Side Request Forgery Vulnerability...
TencentOS Server 4: pcs (TSSA-2026:0801)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0801 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
Linux Distros Unpatched Vulnerability : CVE-2026-68387
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: can: raw: add locking for raw flags bitfield With commit 890e5198a6e5 can: raw: use bitfield...
PT-2026-70945
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ksmbd module where the receive path only applies the minimum SMB2 PDU Protocol Data Unit size check when the ProtocolId is SMB2 PROTO NUMBER. Packets using SMB2...
TencentOS Server 2: dovecot (TSSA-2026:0831)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0831 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...
Important: Red Hat Security Advisory: isns-utils security update
An update for isns-utils is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...
CVE-2026-68133
A flaw was found in the Linux kernel's ice driver. A local attacker, by triggering a Physical Function PF reset while the Precision Time Protocol PTP state is uninitialized, could cause an invalid state transition. This could lead to a kernel bug and a system crash, resulting in a Denial of Servi...
CVE-2026-68130
A flaw was found in ksmbd, a kernel module for SMB3 protocol server in the Linux kernel. An authenticated attacker can exploit a vulnerability in the NTLM NT LAN Manager authentication process. By manipulating specific fields in the NTLM authentication blob, an attacker can cause a victim's sessi...
CVE-2026-68117
A flaw was found in the Linux kernel's TIPC Transparent Inter-Process Communication protocol. A local attacker could exploit this vulnerability by repeatedly creating and failing to insert new sockets, causing the tipcskcreate function to leave a dangling pointer to a freed socket object. This...
netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers
A flaw was found in the Netty HAProxy PROXY protocol v2 codec. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy PROXY protocol v2 header with nested PP2TYPESSL type-length-value TLV records. This can lead to a memory leak, causing the underlying cumulation...
org.apache.artemis:artemis-server: org.apache.activemq:artemis-server: Apache Artemis, Apache ActiveMQ Artemis: Message injection and exfiltration due to missing authentication
A flaw was found in Apache Artemis and Apache ActiveMQ Artemis. An unauthenticated remote attacker can exploit a missing authentication for critical function vulnerability by using the Core protocol. This allows the attacker to force a target broker to establish an outbound Core federation...
CVE-2026-73213
Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, addrlesseq in src/client/nsturnioaddr.c uses a component-wise comparison for native IPv6 min-max intervals in ioaaddrinrange, allowing an authenticated TURN client to relay to an IPv6 peer that is numerically...
CVE-2026-62750
Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network...
CVE-2026-62898
CVE-2026-62898 describes a use-after-free in Microsoft QUIC that enables an unauthenticated attacker to disclose information over the network. The connected documents confirm the vulnerability type and impact (information disclosure) but do not provide affected versions, impacted components beyon...
CVE-2026-62898 Microsoft QUIC Information Disclosure Vulnerability
...
