TencentOS Server 2: gstreamer1-plugins-good (TSSA-2026:1364)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1364 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2026-121086

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in Skia in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-121200

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect reference resolution in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execut...

Linux Distros Unpatched Vulnerability : CVE-2026-121156

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in Dawn in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafte...

Linux Distros Unpatched Vulnerability : CVE-2026-121124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper adherence to coding standards in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the...

Ubuntu 16.04 LTS : Swift Mailer vulnerability (USN-8986-1)

The remote Ubuntu 16.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8986-1 advisory. Dawid Golunski discovered that Swift Mailer did not properly sanitize e-mail addresses in the mail transport. A remote attacker could possibly use this issue to...

Linux Distros Unpatched Vulnerability : CVE-2026-121226

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HT...

Linux Distros Unpatched Vulnerability : CVE-2026-121201

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Animation in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML...

Linux Distros Unpatched Vulnerability : CVE-2026-121034

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Views in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2026-121230

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafte...

Linux Distros Unpatched Vulnerability : CVE-2026-121078

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type confusion in V8 in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HT...

PT-2026-137000

Name of the Vulnerable Software and Affected Versions APT versions prior to 2.6.2 Debian 12 Bookworm APT versions prior to 3.0.4 Debian 13 Trixie APT versions prior to 2.4.15ubuntu0.1 Ubuntu 22.04 LTS APT versions prior to 2.8.4ubuntu0.1 Ubuntu 24.04 LTS APT versions prior to 3.2.1ubuntu0.1 Ubunt...

Node.js Brotli decoder out-of-bounds write permits remote code execution (CVE-2026-111497)

Brocade Security has become aware of Node2Shell also known as CVE-2026-111497, HTTP2Shell, or Broccoli2Shell. A flaw in the Brotli decoder bundled with Node.js allows malformed compressed input to write past the end of an internal decoder buffer. An invalid block switch was reported as a temporar...

PT-2026-137182

Name of the Vulnerable Software and Affected Versions IBM Watson Speech Services Cartridge versions 4.0.0 through 5.4.0 Description A use-after-free flaw in the bundled OpenSSL library allows a remote, unauthenticated attacker to execute arbitrary code over the network. Use-after-free is a memory...

IBM Watson Speech Services Cartridge resource management error vulnerability

Versions 4.0.0 through 5.4.0 of IBM Watson Speech Services Cartridge contain a resource management error vulnerability stemming from use-after-free issues, which may allow remote attackers to execute arbitrary code...

CVE-2026-92196

The Quest Foglight for Databases software is vulnerable to Server-Side Template Injection (SSTI) leading to Remote Code Execution (RCE) . The flaw exists within the renderTemplateString method due to the lack of proper validation of user-supplied strings before they are processed by the template ...

CVE-2026-92196 Quest Foglight for Databases renderTemplateString Server-Side Template Injection Remote Code Execution Vulnerability

Quest Foglight for Databases renderTemplateString Server-Side Template Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required to exploit this...

CVE-2026-92189 Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability

Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is not required to exploit this...

CVE-2026-92189

The Quest Foglight for Databases software is vulnerable to Remote Code Execution (RCE) due to a flaw in the writeTopologySectionToFile method. The root cause is the lack of proper validation of a user-supplied path prior to use in file operations (CWE-73). This vulnerability allows remote attacke...

CVE-2026-92197

A Directory Traversal vulnerability exists in the unzipFile method of Quest Foglight for Databases . The root cause is the lack of proper validation of a user-supplied path prior to its use in file operations. This flaw allows authenticated remote attackers to execute arbitrary code in the contex...