Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2024-58079)

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix crash during unbind if gpio unit is in use We used the wrong device for the device managed functions. We used the usb device, when we should be using the interface device. If we unbind the driver from the usb...

Siemens SIMATIC S7-1500 TM MFP Incorrect Synchronization (CVE-2026-23281)

In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix use-after-free in lbsfreeadapter The lbsfreeadapter function uses timerdelete non-synchronous for both commandtimer and txlockuptimer before the structure is freed. This is incorrect because timerdelete does n...

Linux net/core/flow_dissector skb_flow_dissect Buffer Overflow

The vulnerability of the skbflowdissect function in the net/core/flowdissector.c component of the Linux operating system is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Siemens SIMATIC S7-1500 TM MFP Multiple Locks of a Critical Resource (CVE-2026-23292)

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix recursive locking in configfsopenfile In flushwritebuffer, &p-fragsem is acquired and then the loaded store function is called, which, here, is targetcoreitemdbrootstore. This function called filpopen, following...

ROS-20261020-73-0030

The vulnerability of the ImageFilter.RankFilter.filter function in the Pillow image processing library is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...

Linux Distros Unpatched Vulnerability : CVE-2026-98647

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix divide-by-zero in btfstructwalk When an access goes past the struct and the last member is a flexible array, btfstructwalk folds the offset back into a...

Linux nft_meta_bridge_get_eval Buffer Overflow DoS

The vulnerability of the nftmetabridgegeteval function in the net/bridge/netfilter/nftmetabridge.c file of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-53080)

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsfw: fix NULL dereference of 'old' filters before change Like pointed out by Sashiko 1, since commit ed76f5edccc9 'net: sched: protect filterchain list with filterchainlock mutex' TC filters are added to a shared blo...

AlmaLinux 9.2 [TuxCare] Security Update: compat-libpthread-nonshared / glibc / glibc-all-langpacks / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791894819)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791894819 advisory. - Passing an effectively empty string to the ,ccs= syntax extension of the mode argument in the fopen function in the GNU C Library...

AlmaLinux 9.2 [TuxCare] Security Update: compat-openssl11 (ALMALINUX9.2:CLSA-2026:1792496065)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792496065 advisory. - Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46196)

In the Linux kernel, the following vulnerability has been resolved: tracepoint: balance regfunc on funcadd failure in tracepointaddfunc When a tracepoint goes through the 0 - 1 transition, tracepointaddfunc invokes the subsystem's ext-regfunc before attempting to install the new probe via funcadd...

Atlassian Jira Service Management Data Center and Server 10.3.x < 10.3.24 / 11.3.x < 11.3.11 (JSDSERVER-16827)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16827 advisory. - Axios is a promise-based HTTP client for the browser and Node.js. From 0.28.0 until 0.34.0 and 1.15....

CentOS Linux 8.4 [TuxCare] Security Update: bpftool / kernel / kernel-core / kernel-cross-headers / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1791858083)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791858083 advisory. - In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free of encap entry in neigh update...

PT-2026-118507

Name of the Vulnerable Software and Affected Versions aaPanel versions prior to 8.25.0 Description An OS command injection issue exists in the File Manager component. The ExecShell function within the class/public/common.py file is susceptible to manipulation via the sfile, dfile, access, and use...

FreeRDP RDP DoS

The vulnerability of the wtsreaddrdynvcdatafirst function in the RDP client FreeRDP is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2025-60494

A segmentation violation in the gfpropsequalinternal function /filtercore/filterprops.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted data file...

CVE-2025-60475

A buffer overflow in the gfac4parserbs function /mediatools/avparsers.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

PT-2026-118442

One logical thread of a user-mode ThreadX module costs the Module Manager's shared object pool two allocations, not one. The module asks for a TX THREAD control block through txm module object allocate; txm module manager thread create then takes a second allocation of TXM MODULE KERNEL STACK SIZ...

Wireshark 1.12.x < 1.12.2 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.12.2. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.12.2 advisory. - The dissectwritestructuredfield function in epan/dissectors/packet-tn5250.c in the TN5250 dissector i...

OPNsense readline Bypass

The vulnerability of the readline function in the usernamefld web interface of the OPNsense operating system is related to incorrect processing of output data for registration logs. Exploiting this vulnerability can allow a remote attacker to bypass existing security mechanisms...