CVE-2026-20539: Buffer Over-read

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation...

ROS-20261005-73-0015

The vulnerability of the Rsync file transfer and synchronization utility is related to the tracking of symbolic links in UNIX systems. Exploiting this vulnerability could allow an attacker to read arbitrary files...

Arbitrary file read via the convert_playwright_script prompt in mcp-k6

A caller who can invoke the convertplaywrightscript prompt in mcp-k6 can pass a bare file path as the playwrightscript argument and receive the contents of any file readable by the user running the server, including SSH keys and cloud credentials in that user's home directory path traversal. The...

CVE-2026-20528: Out-of-bounds Write

In ccci, there is a possible out of bounds write and read due to a missing bounds check. This could lead to local information disclosure, memory corruption, crashes, or privilege escalation if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation...

CVE-2026-28667: Improper Restriction of Operations within the Bounds of a Memory Buffer

In multiple functions of rwt5t.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-106144

In multiple functions of rw t5t.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-106151

In multiple functions of PduParser.java, there is a possible out of bounds read due to a missing bounds check. This could lead to a remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-104029: Out-of-bounds Read

A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted request to the autofs responder UNIX socket. Due to improper buffer offset calculation during request parsing, the service performs an out-of-bounds memory read. This flaw can cause the autofs...

MikroTik RouterOS Path Traversal (CVE-2026-67281)

RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a stale uninitialized principal pointer used for file authorization. An unauthenticated attacker can prepare the allocator so that the file- serving path dereferences...

The vulnerabilities of the get_absolute_path() and validate_absolute_path() methods in the Tornado asynchronous networking library allow attackers to read arbitrary files.

The vulnerability of the getabsolutepath and validateabsolutepath methods in the Tornado asynchronous networking library is related to incorrect definition of links before accessing files. Exploiting this vulnerability allows an attacker to read arbitrary files remotely...

Cisco ASA Out-of-bounds Read (CVE-2020-3298)

A vulnerability in the Open Shortest Path First OSPF implementation of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the reload of an affected device, resulting in a denial of service DoS...

CVE-2026-101893: Improper Restriction of XML External Entity Reference

Newell Brands DYMO ID 1.5.1.71 parses job files using XmlDocument.Load without disabling DTD processing. The PC Job Files view automatically parses every recognized job file extension on folder browse. A crafted file on any browsed network share can perform SSRF, capture NTLMv2 credentials, read...

PT-2026-106227

Name of the Vulnerable Software and Affected Versions Newell Brands DYMO ID versions prior to 1.6.0 Description The software parses job files using the XmlDocument.Load function without disabling Document Type Definition DTD processing. The PC Job Files view automatically parses all recognized jo...

Linux Distros Unpatched Vulnerability : CVE-2026-63268

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name a folder of local te...

MiracleLinux 9 : libpcap-1.10.0-4.el9_8.1 (AXSA:2026-1962:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1962:01 advisory. libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access CVE-2026-0799 Tenable has extracted the preceding description blo...

ALSA-2026:76045 Important: libpcap security update

The libpcap packages provide a portable framework for low-level network monitoring. The libpcap library provides network statistics collection, security monitoring, and network debugging. Security Fixes: libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access...

CVE-2026-59782: Out-of-bounds Read

The JavaScript preprocessing Duktape engine on Zabbix server has a vulnerability where a limited administrator is able to read raw heap data potentially resulting in leaked data from other running preprocessors not available to said administrator...

RHEL 8 : libpcap (RHSA-2026:76045)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:76045 advisory. The libpcap packages provide a portable framework for low-level network monitoring. The libpcap library provides network statistics collection,...

ROS-20261005-73-0139

The vulnerability in the kernel-lt is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

AlmaLinux 10 : kernel (ALSA-2026:71602)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:71602 advisory. kernel: fbcon: Set fbdisplayi-mode to NULL when the mode is released CVE-2025-40323 kernel: libceph: fix potential use-after-free in havemonandosdmap...