PT-2026-87259

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An out-of-bounds read allows an authorized attacker to disclose sensitive information over a network. An out-of-bounds read occurs when the software reads data past the end of the intended...

PT-2026-87937

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A buffer over-read allows an authorized attacker to disclose sensitive information over a network. A buffer over-read occurs when a program reads more data from a buffer than it is intende...

PT-2026-87400

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

PT-2026-87291

Name of the Vulnerable Software and Affected Versions Windows Program Compatibility Assistant Service affected versions not specified Description An out-of-bounds read in the Windows Program Compatibility Assistant Service allows an authorized attacker to disclose sensitive information over a...

PT-2026-87975

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. In Microsoft Office, this flaw allows an...

PT-2026-87307

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Licensing Service affected versions not specified Description A use-after-free condition exists in the Windows Remote Desktop Licensing Service. This allows an authorized attacker to elevate privileges over a network...

PT-2026-87932

Name of the Vulnerable Software and Affected Versions Windows Imaging Component affected versions not specified Description A heap-based buffer overflow occurs in the Windows Imaging Component, which is a framework that allows developers to integrate imaging functionality into their applications...

r2ai v1.4.4

R2AI - Augmented reversing with LLM for radare2 ╭─────────────────────────────────╮ │ , . . , │ ╭──╮ │ : \ \ |: \ : | │ │ │ │ | |/ || , || : | │ │ O O | : \ \ . || : || | │ │ │╷ │ | |\ :||| || | │ │ ││ │ || : |||| │ │ ─╯│ ╰─────────────────────────────────╯ ╰───╯ Components This repository...

K000163173: Linux kernel MRP vulnerability CVE-2026-53245

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: net/802/mrp: fix vector attribute parsing in mrppduparsevecattr In mrppduparsevecattr, vector attribute events are encoded three per byte and valen tracks the number of events left to process. The...

Use Of A Broken Or Risky Cryptographic Algorithm

Spring Security is vulnerable to Use of a Broken or Risky Cryptographic Algorithm. The vulnerability is due to AesBytesEncryptor using AES/CBC with a null all-zero initialization vector, which allows an attacker to exploit predictable encryption and potentially infer relationships between encrypt...

Linux Distros Unpatched Vulnerability : CVE-2026-78134

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 4.5.0 through 6.0.7 has Incorrect Access Control in the eap-ttls and eap-peap plugins because there can be a missing or mismatched inner EAP identity...

Linux Distros Unpatched Vulnerability : CVE-2026-78129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS5 decryption. CVE-2026-78129 Note that Nessus relies on the presence of the package as reported by th...

trivy-0.74.0-3.1 on GA media (moderate)

trivy-0.74.0-3.1 on GA media Announcement ID: openSUSE-SU-2026:11691-1 Rating: moderate Cross-References: CVE-2026-56855 CVSS scores: CVE-2026-56855 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-56855 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N...

Linux Distros Unpatched Vulnerability : CVE-2026-81738

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out- of-bounds write via crafted DOMAIN-SEARCH entries...

CVE-2020-16911

creationtimestamp| type| source ---|---|--- 2026-09-04 08:00:05+00:00| seen| https://t.me/timcorehacking/1025 2026-09-05 01:00:36+00:00| seen| https://t.me/timcorehacking/1025...

helm3-3.21.3-7.1 on GA media (moderate)

helm3-3.21.3-7.1 on GA media Announcement ID: openSUSE-SU-2026:11669-1 Rating: moderate Cross-References: CVE-2026-37236 CVSS scores: CVE-2026-37236 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2026-37236 SUSE : 6.3 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N...

libmsgpack-c2-7.0.2-2.1 on GA media (moderate)

libmsgpack-c2-7.0.2-2.1 on GA media Announcement ID: openSUSE-SU-2026:11672-1 Rating: moderate Cross-References: CVE-2026-72854 CVSS scores: CVE-2026-72854 SUSE : 5.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can no...

Fedora 43 : python-pip (2026-30b4eb25df)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-30b4eb25df advisory. Security fixes for CVE-2026-13346 and CVE-2026-8643 Tenable has extracted the preceding description block directly from the Fedora security advisory...

CVE-2026-82526

R2R through 3.6.6 contains a stacked SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL statements by manipulating the index name parameter in the vector index creation endpoint. The index name is interpolated directly into a CREATE INDEX statement via stri...

CVE-2026-82526 R2R 3.6.6 SQL Injection via Vector Index Creation Endpoint

R2R through 3.6.6 contains a stacked SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL statements by manipulating the index name parameter in the vector index creation endpoint. The index name is interpolated directly into a CREATE INDEX statement via stri...