690812 matches found
Rocky Linux 10.2 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_85321)
The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202685321 advisory. kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: xfrm: espintcp: do not reuse an in-progress partial send CVE-2026-529...
CentOS Linux 6 [TuxCare] Security Update: apr-util / apr-util-devel / apr-util-ldap / apr-util-mysql / etc Multiple Vulnerabilities (CENTOS6:CLSA-2026:1792506468)
The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1792506468 advisory. - A bug in APR-util version 1.6.3 and earlier allows a stack recursion attack against any library consumer which parses XML from untrust...
SUSE SLES12: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2026:4806-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4806-1 advisory. Firefox Extended Support Release 153.5.0 ESR MFSA 2026-108, bsc1284493: - CVE-2026-109704: Privilege escalation in the Application...
PT-2026-121420
Name of the Vulnerable Software and Affected Versions GraphQL-core versions 3.0.0 through 3.2.11 GraphQL-core versions 3.3.0rc0 and earlier Description An unauthenticated remote attacker can cause a denial of service by submitting a shallow, highly compressible GraphQL query. The issue exists in...
Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142501)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142501 advisory. In the Linux kernel, the following vulnerability has been resolved: libceph: fix OOB read in decodewatchers via missing bounds check cephstartdecoding validates that...
Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142699)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142699 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE...
openSUSE 16: MozillaFirefox / MozillaFirefox-branding-upstream / etc (openSUSE-SU-2026:22139-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22139-1 advisory. Firefox Extended Support Release 153.5.0 ESR MFSA 2026-108, bsc1284493: - CVE-2026-109704: Privilege escalation in the Application Update...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143045)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143045 advisory. A use-after-free vulnerability in the Linux kernel's afunix component can be exploited to achieve local privilege escalation. The unixstreamsendpage function tries t...
Unity Linux 20.1070a Security Update: kernel (UTSA-2026-143122)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-143122 advisory. In the Linux kernel, the following vulnerability has been resolved: i40e: add validation for ringlen param The ringlen parameter provided by the virtual function VF ...
AlmaLinux 9.6 [TuxCare] Security Update: gdb / gdb-doc / gdb-gdbserver / gdb-headless / gdb-minimal (ALMALINUX9.6:CLSA-2026:1792625564)
The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792625564 advisory. - A flaw was found in GDB's STABS debug format parser. The readmemberfunctions function in gdb/stabsread.c contains a linked list removal bug...
openSUSE 16: sequoia-sq / sequoia-sq-bash-completion / etc (openSUSE-RU-2026:22132-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-RU-2026:22132-1 advisory. Changes in sequoia-sq: - Use crypto-openssl also for tests Update to version 1.5.0: tool: Release v1.5.0. tool: Fix link to README. tool: Set a...
PT-2026-121429
OpenCATS before 0.12.0 contains a stored cross-site scripting vulnerability that allows a low-privileged authenticated user to inject HTML/JavaScript payloads by setting a Candidate, Company, Contact, Job Order, or List name/title field, which is stored unsanitized and later rendered unescaped in...
PT-2026-121394
In EmberZNet 9.1.1 and earlier, a malformed Publish Billing Period command can result in a recursive function call that will never reach its end condition. These messages must come from a device that has already joined the network. Only devices supporting the Price Cluster are impacted...
PT-2026-121678
Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network...
ROS-20261022-73-0049
Vulnerability in the function railmain.c:railserverhandlemessages of the RDP client FreeRDP, related to buffer overflow, allowing an attacker to trigger a service failure...
ROS-20261022-73-0069
A vulnerability exists in the httpproxyconnect function, due to the introduction of a CONNECT request by the RDP client FreeRDP. This vulnerability is related to the introduction of HTTP proxy requests/headers in the proxy server, allowing an attacker to execute arbitrary requests...
ROS-20261022-73-0087
A vulnerability in the planardecompressplanerle function of the RDP client FreeRDP, related to reading beyond the allowed range, allows a malicious actor to cause a service failure on the client side when encountering an unmatched page...
PT-2026-121687
A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. Impacted is the function kirim of the file application/modules/web/controllers/contact.php of the component Contact Form. Executing a manipulation of the argument...
PT-2026-120927
A vulnerability has been found in Linksys RE6250 1.0.04.001. This affects the function strcmp of the component Web Management Interface. The manipulation of the argument session id leads to insufficiently random values. The attack may be initiated remotely. The complexity of an attack is rather...