Linux Distros Unpatched Vulnerability : CVE-2026-12259

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In nltk version 3.9.4, the nltk.downloader.Downloader.downloadpackage function writes downloaded package bytes to disk and may extract them before enforcing...

TencentOS Server 4: freerdp (TSSA-2026:0775)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0775 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Hanwha Vision Cameras Improper Input Validation (CVE-2024-54011)

Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handle data supplied in certain requests, causing a service disruption. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and...

The vulnerability of Google Chrome, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Virtuozzo Infrastructure 7.4 Hotfix 1 (7.4.0-75)

This update provides stability fixes. Vulnerability id: VSTOR-102068, VSTOR-102069, VSTOR-138302 Creating a VM in a server group could fail with "No valid host found" because a previously canceled or failed VM remained in the server group. Vulnerability id: VSTOR-120923 VPN could stop working whe...

PT-2026-67451

A certification validation weakness exists in communication between affected Omada devices and cloud controllers. Certificate identity verification does not adequately validate that a presented certificate corresponds to the expected cloud controller hostname, which may allow certificate validati...

PT-2026-67494

Name of the Vulnerable Software and Affected Versions Apache NiFi versions 1.10.0 through 2.10.0 Description Authorization handling for Parameter Context validation requests allows clients with read access to submit proposed Parameter values. These proposed values override the current...

PT-2026-67529

Name of the Vulnerable Software and Affected Versions cryptography versions prior to 49.0.0 Description A flaw exists in the verifier where a wildcard pattern in the DNS Subject Alternative Name SAN of a leaf certificate is incorrectly treated as matching a more-specific permitted constraint of a...

CVE-2026-51190

The CVE-2026-51190 entry concerns Serverless-Devs (package @serverless-devs/s) version

CVE-2026-38446

A stored cross-site scripting XSS vulnerability exists in osTicket 1.18.3 due to improper sanitization of the thread entry title field. User-controlled input in the title is stored without adequate HTML escaping and later rendered in multiple staff-facing templates without proper output encoding...

The vulnerability of the JSON Script Runner component of the cross-platform application for viewing and modifying database data in the DbGate browser allows a perpetrator to execute arbitrary code.

The vulnerability of the JSON Script Runner component in a cross-platform application for browsing and modifying database data in the DbGate browser is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Oracle Linux 9 : frr (ELSA-2026-49527)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-49527 advisory. 8.5.3-15.1 - Resolves: RHEL-193234 - input validation fixes for EVPN NLRI and ENCAP/VNC packet parsing 8.5.3-15 - Resolves: RHEL-176258 - AVC when reading user...

Hanwha Vision Cameras OS Command Injection (CVE-2024-54012)

Penetration Testing engineers at Amazon discovered a vulnerability where the camera system failed to properly validate input, allowing specially crafted requests containing malicious commands to be executed on the device. The manufacturer has released patch firmware for the flaw; please refer to...

RHEL 10 : osbuild-composer (RHSA-2026:49526)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:49526 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...

EUVD-2026-52479

The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, allowing attackers to cause a Denial of Service DoS via inputting unsafe parameters...

ROS-20260803-73-0021

The vulnerability of the stmmactsoxmit function in the drivers/net/ethernet/stmicro/stmmac/stmmacmain.c file of the Ethernet driver module from STMicroelectronics’ operating system Linux is related to the lack of proper validation for incoming requests. Exploiting this vulnerability could allow a...

Lexmark Printers Improper Input Validation (CVE-2013-6032)

cgi-bin/postpf/cgi-bin/dynamic/config/config.html on Lexmark X94x before LC.BR.P142, X85x through LC4.BE.P487, X644 and X646 before LC2.MC.P374, X642 through LC2.MB.P318, W840 through LS.HA.P252, T64x before LS.ST.P344, X64xef through LC2.TI.P325, C935dn through LC.JO.P091, C920 through LS.TA.P15...

RHEL 10 / 8 / 9 : Red Hat JBoss Enterprise Application Platform 8.1.7 (RHSA-2026:49700)

The remote Redhat Enterprise Linux 10 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:49700 advisory. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This...

The vulnerability of Google Chrome’s GPU component, which allows a hacker to trigger a service failure

The vulnerability of Google Chrome’s GPU component is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the SiteIsolation component in the Google Chrome browser allows a hacker to trigger a service failure.

The vulnerability of Google Chrome’s SiteIsolation component is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...