Rocky Linux 8 [CIQ] Security Update: cyrus-imapd / cyrus-imapd-debuginfo / cyrus-imapd-debugsource / etc (crlsa-2021_3492)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20213492 advisory. cyrus-imapd: Denial of service via string hashing algorithm collisions CVE-2021-33582 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 9 [CIQ] Security Update: libinput / libinput-debuginfo / libinput-debugsource / etc (crlsa-2022_5257)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20225257 advisory. libinput: format string vulnerability may lead to privilege escalation CVE-2022-1215 Tenable has extracted the preceding description block directly from the CIQ...

PT-2026-105905

Impact RestrictedPython could allow a sandbox escape when a policy exposes the standard library string module, or otherwise exposes string.Formatter, to restricted code. string.Formatter field resolution methods such as get field can perform attribute and item traversal internally and return live...

Rocky Linux 8 [CIQ] Security Update: ruby / ruby-debuginfo / ruby-debugsource / ruby-devel / ruby-doc / etc (crlsa-2022_5338)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20225338 advisory. Ruby: Buffer overrun in String-to-Float conversion CVE-2022-28739 Tenable has extracted the preceding description block directly from the CIQ security advisory. Not...

Rocky Linux 9.6 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.6:CLSA-2026:1769786327)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1769786327 advisory. - Within HostnameError.Error, when constructing an error string, there is no limit to the number of hosts that will be printed out...

GHSA-3HV7-MJH2-FV65 Tornado: Unbounded query-string argument count allows event-loop-stalling DoS

Summary HTTPServerRequest.init in tornado/httputil.py parses the URL query string via parseqsbytes with no field-count limit — while the sibling POST-body parsing path parsebodyarguments received a maxnumfields=1000 cap added earlier in this exact same release v6.5.8, commit 8d6363ed, explicitly ...

brace-expansion: brace-expansion: Denial of Service via crafted brace patterns

A flaw was found in brace-expansion. A remote attacker can cause a Denial of Service DoS by supplying specially crafted string patterns with repeated closing braces. Processing these malformed patterns causes the string expansion logic to repeatedly rescan the entire input, leading to excessive...

CVE-2026-47494

A flaw was found in the NVIDIA GPU Display Driver for Linux. A local user can exploit this vulnerability by providing crafted input that triggers a format string flaw. Successful exploitation may lead to arbitrary code execution, privilege escalation, a Denial of Service DoS, or unauthorized...

CLEANSTART-2026-UH45267 NewNTUnicodeString does not check for string length overflow

Security vulnerability affects the crane package. NewNTUnicodeString does not check for string length overflow...

CLEANSTART-2026-AY14774 ParseAddress function constructs domain-literal address components through repeated string concatenation

Security vulnerability affects the buildkitd package. The ParseAddress function constructs domain-literal address components through repeated string concatenation...

CVE-2026-47515

A flaw was found in the NVIDIA GPU display driver. A local user with elevated privileges can trigger an unbounded string operation within the kernel mode layer, causing an out-of-bounds memory read. Successful exploitation could allow the attacker to execute arbitrary code, escalate privileges,...

CVE-2026-47562

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could inject crafted text into the kernel log because the supplied version string is not properly sanitized. A successful exploit of this vulnerability might lead to denial of service and data...

CVE-2026-47515

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds read via an unbounded string operation. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges...

DEBIAN-CVE-2026-47515

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds read via an unbounded string operation. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges...

CVE-2026-47494

NVIDIA GPU Display Driver for Linux contains a vulnerability where a user might be able to cause a format string issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure...

DEBIAN-CVE-2026-47494

NVIDIA GPU Display Driver for Linux contains a vulnerability where a user might be able to cause a format string issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure...

UBUNTU-CVE-2026-47494

NVIDIA GPU Display Driver for Linux contains a vulnerability where a user might be able to cause a format string issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure...

CVE-2026-47515

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds read via an unbounded string operation. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges...

CVE-2026-47515

The NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer . An unbounded string operation allows a user to trigger an out-of-bounds read . Successful exploitation could result in code execution , denial of service , escalation of privileges , informatio...

CVE-2026-47494

NVIDIA GPU Display Driver for Linux contains a vulnerability where a user might be able to cause a format string issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure...