176609 matches found
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000566)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000566 advisory. Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: hdf5 (UTSA-2023-001155)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001155 advisory. An issue was discovered in HDF5 through 1.12.0. A heap-based buffer over-read exists in the function H5Olayoutdecode located in H5Olayout.c. It allows an attacker to...
Linux Distros Unpatched Vulnerability : CVE-2026-54633
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PoDoFo is a C++17 PDF manipulation library. From version 1.0.0 until 1.1.1, processing a crafted PDF with an Indexed color-space image can cause a heap...
Linux Distros Unpatched Vulnerability : CVE-2026-76151
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds read buffer over-read in the HTTP Cache-Control response header parsing in the QtNetwork module in Qt Group Qt 6.0.0 through 6.8.8, and 6.9.0...
CentOS 9 : vim-8.2.2637-41.el9
The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the vim-8.2.2637-41.el9 build changelog. - out-of-bounds read in updatesnapshot CVE-2026-52859 - buffer overflow in terminal emulator CVE-2026-28420 - stack out-of-bounds write in...
APSB26-150 : Security update available for Adobe Connect
Adobe has released a security update for Adobe Connect. This update resolves critical and important vulnerabilities that could result in arbitrary code execution, arbitrary file system read, privilege escalation, and security feature bypass. Adobe is not aware of any exploits in the wild for any ...
ROS-20260922-73-0029
The vulnerability in gstreamer1-plugins-ugly is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260922-73-0028
The vulnerability in gstreamer1-plugins-ugly is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260922-73-0027
The vulnerability in gstreamer1-plugins-bad-free is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-96910
Name of the Vulnerable Software and Affected Versions Adobe Campaign Classic ACC affected versions not specified Description An Improper Neutralization of Special Elements used in an SQL Command, known as SQL Injection, allows a low-privileged attacker to bypass security features. This issue...
ALSA-2026:69964 Moderate: coreutils security update
The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages. Security Fixes: coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification CVE-2025-5278 For more details about the security...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: hdf5 (UTSA-2026-054071)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054071 advisory. An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Olayoutdecode in H5Olayout.c, related to HDmemcpy...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: git (UTSA-2023-000319)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000319 advisory. Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined by adding a...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000549)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000549 advisory. Out-of-bounds Read in GitHub repository vim/vim prior to 9.0. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: httpd (UTSA-2023-003822)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003822 advisory. Apache HTTP Server 2.4.53 and earlier may crash or disclose information due to a read beyond bounds in apstrcmpmatch when provided with an extremely large input...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000280)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000280 advisory. Buffer Over-read in GitHub repository vim/vim prior to 9.0.0218. Tenable has extracted the preceding description block directly from the Unity Linux security advisor...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000559)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000559 advisory. Buffer Over-read in GitHub repository vim/vim prior to 8.2. Tenable has extracted the preceding description block directly from the Unity Linux security advisory. No...
ROS-20260922-73-0022
The vulnerability in gstreamer1-plugins-good is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-88345
An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e . The flaw is triggered when an exact-length FlatBuffers schema ends with an unterminated quotation mark , causing the C-string scanning logic in the lex() function to dereference the input pointer beyond the buffer...