dhcpcd parse_option() DoS

The vulnerability of the parseoption function in the DHCP server dhcpcd is related to the use of pointers. Exploiting this vulnerability could allow an attacker to trigger a service failure...

vvdecapp Decoder Heap Use-After-Free

The vulnerability of the createSubPicRefBufs function in the vvdecapp VVdeC decoder lies in the use of memory after it is freed during the processing of specially created VVC streams. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

FreeRDP RDP DoS

The vulnerability of the httpchunkedread function in the RDP client FreeRDP is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failures...

FreeRDP Emulate Function DoS

The vulnerability of the functions EmulateSCardReleaseContext and EmulateSCardTransmit in the RDP client FreeRDP is related to an uncontrolled, exploitable flaw. Exploiting this vulnerability could allow a malicious actor to cause service failures...

FreeRDP RDP DoS

The vulnerability of the serialprocessirpclose function in the RDP client of FreeRDP is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the radeonfbpciregister function in the drivers/video/fbdev/aty/radeonbase.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...

AppX Deployment Service Privilege Escalation Data Substitution

The vulnerability of the AppX Deployment Service AppXSVC for Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to replace data...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : c-ares vulnerabilities (USN-8951-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8951-1 advisory. It was discovered that c-ares incorrectly parsed certain SOA replies. A remote attacker could...

RHEL 9 : libkcapi (RHSA-2026:87712)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:87712 advisory. libkcapi allows user-space to access the Linux kernel crypto API. This library uses the netlink interface and exports easy to use APIs so...

Amazon Linux 2 : php (ALASPHP8.2-2026-015)

The version of php installed on the remote host is prior to 8.2.35-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2PHP8.2-2026-015 advisory. A flaw was found in pcre2. When an application processes attacker-controlled regular expressions using certain...

CentOS Linux 8.5 [TuxCare] Security Update: corosync / corosync-vqsim / corosynclib / corosynclib-devel / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1792622946)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1792622946 advisory. - Corosync through 3.1.9, if encryption is disabled or the attacker knows the encryption key, has a stack- based buffer overflow in...

CentOS Linux 7 [TuxCare] Security Update: squid / squid-migration-script / squid-sysvinit Multiple Vulnerabilities (CENTOS7:CLSA-2026:1790851347)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1790851347 advisory. - An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. Due to incorrect parser validation, it allows a Denial of Service...

Rocky Linux 10.2 [CIQ] Security Update: rust-sequoia-sq-debugsource / sequoia-sq / sequoia-sq-debuginfo Multiple Vulnerabilities (crlsa-2026_85848)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202685848 advisory. hickory-resolver: hickory-resolver: DNSSEC validation bypass allows forged DNS records CVE-2026-93657 rustls-webpki: rustls-webpki: Denial of Service v...

PT-2026-120965

HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service persistent worker-thread CPU exhaustion via an HTTP/1.1 chunked request. Although the H1 multiplexer drains the request before closing the stream, the parser repeatedly re-processes the same bytes without...

HAProxy resource management error vulnerability

Versions prior to HAProxy 3.0.30, 3.2.26, 3.3.17, 3.4.6, and 3.5-dev9 contain a resource management error vulnerability. This vulnerability arises because the HTTP/1.1 chunked request parser repeatedly processes identical bytes without advancing its state, causing affected worker threads to...

PT-2026-121510

Name of the Vulnerable Software and Affected Versions msgpack-python versions prior to 1.2.3 Description The msgpack-python C extension msgpack. cmsgpack leaks a decoded map value during deserialization when a key is rejected while strict map key is set to True. This can lead to unbounded process...

PT-2026-121529

Mistune from 3.0.0 before 3.3.0 contains an algorithmic complexity denial of service vulnerability in the parse link text function in src/mistune/helpers.py. Attackers can submit markdown with deeply nested square brackets triggering quadratic parsing time, exhausting server CPU with small crafte...

EUVD-2026-108206

An issue in Systrome Validation & Certification 1.0 allows an attacker to cause a denial of service via the t URL parameter in the qrcodeauth.html component...

ROS-20261022-73-0003

The vulnerability in freerdp3 is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Important: php

Issue Overview: A flaw was found in pcre2. When an application processes attacker-controlled regular expressions using certain Just-In-Time JIT compiler interfaces, an out-of-bounds write with arbitrary data can occur. An attacker could exploit this vulnerability to achieve arbitrary code...