CVE-2026-47548: Out-of-bounds Write

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and...

CVE-2026-47553: Out-of-bounds Write

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information...

CVE-2026-47529: Out-of-bounds Write

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data...

CVE-2026-47530: Out-of-bounds Write

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and...

CVE-2026-92867: Out-of-bounds Write

An out-of-bounds write vulnerability exists in Pgpool-II , which may allow an authenticated attacker to cause abnormal process termination or arbitrary code execution...

PT-2026-103386

Name of the Vulnerable Software and Affected Versions NVIDIA GPU Display Driver for Linux affected versions not specified Description A flaw exists in the kernel mode layer that allows an attacker to trigger an out-of-bounds write, which occurs when data is written outside the intended memory...

CVE-2026-47561: Out-of-bounds Write

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where the size of an ioctl input buffer is not validated, allowing an unprivileged caller to trigger an out-of-bounds write in kernel memory. A successful exploit of this vulnerability might lead to code...

CVE-2026-101885: Improper Limitation of a Pathname to a Restricted Directory

ZeroClaw versions before 0.8.5 built with plugins-wasm feature contain a path traversal vulnerability in plugin installation that fails to validate the wasmpath manifest field. Attackers can convince users to install crafted plugins that write arbitrary files to paths outside the plugins director...

ROS-20260930-73-0068

The vulnerability in the kernel-lt is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2026-103475: Active Debug Code

yii2-starter-kit through 4.2.0 exposes the Yii debug and Gii modules to all IP addresses by setting allowedIPs to '' in its default development configuration. Unauthenticated remote attackers can access the debug endpoint to read sensitive data including session cookies and database queries, or...

CVE-2026-84788

io/channel-socket: do not treat a zero length write as an error...

PT-2026-103390

🚨 CVE-2026-47541 NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information...

CVE-2026-51862: Undefined Security Weakness

DB-GPT 0.8.0 contains directory traversal in skillupload packages/dbgpt-app/src/dbgptapp/openapi/apiv1/agenticdataapi.py:40. A remote attacker can use the validated exploitation path to write files outside the intended workspace or storage boundary...

PT-2026-103062

An out-of-bounds write vulnerability exists in Pgpool-II, which may allow an authenticated attacker to cause abnormal process termination...

CVE-2026-51864

DB-GPT v0.7.5 and v0.8.0 contains directory traversal in pythonfileupload packages/dbgpt-app/src/dbgptapp/openapi/apiv1/pythonuploadapi.py:42. A remote attacker can use the validated exploitation path to write files outside the intended workspace or storage boundary...

CVE-2026-51864

The DB-GPT software (versions 0.7.5 and 0.8.0 ) contains a directory traversal vulnerability in the python_file_upload function, specifically located at packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/python_upload_api.py:42. A remote attacker can exploit this flaw to write files outside the inte...

Rocky Linux 9.6 [TuxCare] Security Update: gstreamer1-plugins-ugly-free Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1777460813)

The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777460813 advisory. - GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers...

MiracleLinux 8 : perl-DBI-1.641-3.el8_10 (AXSA:2026-1942:06)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1942:06 advisory. perl-DBI: DBI for Perl: Heap out-of-bounds write via unvalidated numeric placeholder CVE-2026-73194 Tenable has extracted the preceding description block...

AlmaLinux 9.2 [TuxCare] Security Update: libpng / libpng-devel / libpng-static / libpng-tools Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1777984435)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1777984435 advisory. - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image...

CentOS Linux 7 [TuxCare] Security Update: glib2 / glib2-devel / glib2-doc / glib2-fam / glib2-static / etc (CENTOS7:CLSA-2026:1770392599)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1770392599 advisory. - A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the gescapeuristring function. If the...