Oracle Linux 10 : vim (ELSA-2026-75769)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-75769 advisory. - RHEL-257016 CVE-2026-73073 arbitrary Ex command execution during C omni-completion - RHEL-253668 CVE-2026-28420 buffer overflow in terminal emulator -...

PT-2026-108304

Name of the Vulnerable Software and Affected Versions SumatraPDF versions prior to 3.6.2 Description The MaybeFlipBitmap function uses GetPropertyItem to read the PropertyTagOrientation size via GDI+ into a fixed 64-byte buffer on the stack. An attacker can trigger a stack-based buffer overflow b...

EulerOS 2.0 SP15 : radvd (EulerOS-SA-2026-4014)

According to the versions of the radvd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack buffer overflow in...

ALSA-2026:79281 Moderate: glibc security, bug fix, and enhancement update

The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc:...

CVE-2026-107736: Stack-based Buffer Overflow

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, MaybeFlipBitmap asks GDI+ to read the attacker-controlled PropertyTagOrientation size through GetPropertyItem while supplying only a fixed 64-byte buf on the stack. Opening a crafted TIFF with enough EXIF Orientation values ca...

CVE-2026-44037: Uncontrolled Recursion

Uncontrolled mutual recursion between DcmJSONReader::parseDataSet, DcmJSONReader::parseElement and DcmJSONReader::parseSequence in dcmdata/libsrc/dcjsonrd.cc of OFFIS DCMTK 3.7.0 allows an attacker to cause a denial of service stack exhaustion and process crash via a crafted DICOM JSON document...

PT-2026-107945

Name of the Vulnerable Software and Affected Versions OFFIS DCMTK version 3.7.0 Description Uncontrolled mutual recursion between the parseDataSet and parseSequence functions in the XML-to-DICOM converter dcmdata/libdcxml/xml2dcm.cc can lead to a denial of service. An attacker can trigger stack...

PT-2026-108272

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description A stack-based buffer overflow allows a remote attacker to execute arbitrary code. A stack-based buffer overflow occurs when a program writes more data to a buffer located on t...

EulerOS 2.0 SP15 : libxml2 (EulerOS-SA-2026-3991)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell function...

EulerOS 2.0 SP15 : p11-kit (EulerOS-SA-2026-3930)

According to the versions of the p11-kit packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in p11-kit. The RPC message attribute parsing functions p11rpcmessagegetattribute and p11rpcmessagegetattributearrayvalue form a...

Linux Distros Unpatched Vulnerability : CVE-2026-104074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Coturn 4.10.0 contains an uninitialized memory disclosure vulnerability that allows remote unauthenticated attackers to leak stack memory contents by sending a...

EulerOS 2.0 SP15 : libxml2 (EulerOS-SA-2026-3925)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershell function...

EulerOS 2.0 SP15 : p11-kit (EulerOS-SA-2026-3996)

According to the versions of the p11-kit packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in p11-kit. The RPC message attribute parsing functions p11rpcmessagegetattribute and p11rpcmessagegetattributearrayvalue form a...

EulerOS 2.0 SP15 : busybox (EulerOS-SA-2026-3966)

According to the versions of the busybox packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack overflow in the evaluate function editors/awk.c of BusyBox commit 371fe9 allows attackers to cause a Denial of Service DoS via supplying ...

RHEL 9 : libxml2 (RHSA-2026:79118)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:79118 advisory. The libxml2 library is a development toolbox providing the implementation of various XML standards. Security Fixes: libxml2: Stack Buffer Overflow i...

CVE-2026-71482

stargz-snapshotter estargz v0.10.0 through v0.18.2: getSource in estargz.go follows hardlinks recursively without tracking visited entries, so an eStargz layer with cyclic hardlinks causes unbounded recursion and a stack overflow denial of service. Fixed in v0.19.0...

PT-2026-109278

Name of the Vulnerable Software and Affected Versions OWASP Coraza WAF versions 3.0.0 through 3.8.0 Description An unauthenticated attacker can cause the hosting process to terminate with an unrecoverable fatal stack overflow. This occurs because the readJSON function in...

PT-2026-108039

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 9.0.3 Description A stack exhaustion issue exists in the av encryption init info free function within libavutil/encryption info.c. This occurs because the function recursively frees AVEncryptionInitInfo linked lists...

SUSE SLES16 Security Update : rustup (SUSE-SU-2026:24014-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:24014-1 advisory. - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded bsc1243862. - CVE-2025-58160:...

MiracleLinux 8 : glibc-2.28-251.el8_10.43 (AXSA:2026-1996:12)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1996:12 advisory. glibc: Process abort due to invalid memory in wordexp CVE-2026-6368 glibc: Denial of Service via stack exhaustion during tilde expansion CVE-2026-67...