187415 matches found
Rocky Linux 10.2 [CIQ] Security Update: tftp / tftp-debuginfo / tftp-debugsource / tftp-server / etc (crlsa-2026_82280)
The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202682280 advisory. tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine CVE-2026-85234 Tenable has extracted the preceding description block directly...
AlmaLinux 9.2 [TuxCare] Security Update: webkit2gtk3 / webkit2gtk3-devel / webkit2gtk3-jsc / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791973636)
The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791973636 advisory. - Inappropriate implementation in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the...
Adobe Bridge 15.x < 15.1.9 / 16.x < 16.0.8 Multiple Vulnerabilities (APSB26-167)
The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 15.1.9 or 16.0.8. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb26-167 advisory. - Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary cod...
Copeland XWEB and XWEB Pro Improper Limitation of a Pathname to a Restricted Directory (CVE-2026-22877)
An arbitrary file-read vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling unauthenticated attackers to read arbitrary files on the system, and potentially causing a denial-of-service attack. This plugin only works with Tenable.ot. Please visit...
Adobe Substance 3D Stager 3.0.0 < 3.1.9 Multiple Vulnerabilities (APSB26-170) (macOS)
The version of Adobe Substance 3D Stager installed on the remote macOS host is prior to 3.1.9. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-170 advisory. - Substance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary code...
Linux Distros Unpatched Vulnerability : CVE-2026-100236
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the DPDK GSO library. When software GSO copies packet headers into a new mbuf, it does not check that the header fits in the source first...
MiracleLinux 9 : tftp-5.2-40.el9_8.1 (AXSA:2026-2044:02)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-2044:02 advisory. tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine CVE-2026-85234 Tenable has extracted the preceding description block direct...
Linux Distros Unpatched Vulnerability : CVE-2026-110170
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium...
PT-2026-113961
Name of the Vulnerable Software and Affected Versions Nessus affected versions not specified Description An SQL injection allows an authenticated user to read or modify data stored by the system. SQL injection is a technique where malicious SQL statements are inserted into entry fields for...
PT-2026-114098
Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msg multipart parse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body...
PT-2026-113774
Name of the Vulnerable Software and Affected Versions DPDK versions prior to 23.11.8 DPDK versions prior to 24.11.8 DPDK versions prior to 25.11.4 openvswitch versions 2.11, 2.12, 2.17, 3.0, 3.1, 3.5, and 3.6 Description A flaw exists in the DPDK GSO library during software segmentation. When...
PT-2026-114235
Name of the Vulnerable Software and Affected Versions FileRise versions prior to 3.18.0 Description FileRise flattens logical folder paths into metadata filenames by replacing separators and spaces with hyphens. This process allows distinct folders, such as team/docs and team-docs, to share a...
PT-2026-114116
Name of the Vulnerable Software and Affected Versions libsmb2 versions prior to 6.2 Description An integer underflow exists in the decode acl function. This allows malicious SMB servers or attackers intercepting unsigned sessions to trigger heap out-of-bounds reads by sending a crafted security...
CVE-2026-110660: Out-of-bounds Read
vgmstream through r2117 contains a stack out-of-bounds read vulnerability in the G.722.1/Siren14 decoder in g7221lib.c, whose bit reader refills without checking the datau32 array end. Attackers can supply crafted .s14 or .sss files that drive decodevectorquantizedmltindices past the stack buffer...
Linux Distros Unpatched Vulnerability : CVE-2026-110143
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of uninitialized variable in ThirdParty lmzasdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read memory inside the...
CVE-2026-73252: Integer Underflow (Wrap or Wraparound)
Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TLS stack selected by MGTLSBUILTIN in src/tlsbuiltin.c accepts a TLS 1.3 record whose decrypted size is exactly the 16-byte authentication tag with no plaintext or ContentType byte. In mgtlsrecvrecord, the msgsz...
NetX Duo 6.5.2.202603 Out-Of-Bounds Read
NetX Duo version 6.5.2.202603 and earlier contains an out-of-bounds read in the SNMP OID parser when processing multi-byte BER lengths...
ROS-20261014-73-0033
The vulnerability in the kernel-lt is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
Mozilla Firefox 157 IonMonkey Out-Of-Bounds Read
Mozilla Firefox version 157 contains an IonMonkey JIT constant-folding flaw that can eliminate typed-array bounds checks and allow out-of-bounds memory reads. The proof of concept details a shift-count mismatch fixed in Firefox 158. https://packetstorm.news/download/235630...