PT-2026-71313

The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an unusually long catalog, schema, or object name to a metadata retrieval function. This may result in memory corruption within the calling application's process, leading to...

PT-2026-71282

Name of the Vulnerable Software and Affected Versions Dell Display and Peripheral Manager DDPM Windows versions prior to 2.3.0.17 Description Improper Access Control allows a low privileged attacker with local access to achieve Elevation of Privileges and execute arbitrary code. Recommendations...

PT-2026-71269

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description A stack-based buffer overflow allows a remote attacker to execute arbitrary code. A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer ...

PT-2026-71279

Name of the Vulnerable Software and Affected Versions Dell Display and Peripheral Manager DDPM Windows versions prior to 2.3.0.17 Description An authentication bypass by spoofing allows a low privileged attacker with local access to achieve elevation of privileges and execute arbitrary code...

PT-2026-71281

Name of the Vulnerable Software and Affected Versions Dell Display and Peripheral Manager DDPM Windows versions prior to 2.3.0.17 Description An authentication bypass by spoofing allows a low privileged attacker with local access to achieve elevation of privileges and execute arbitrary code...

PT-2026-71058

Name of the Vulnerable Software and Affected Versions FortiClientWindows versions 7.4.0 through 7.4.3 FortiClientWindows versions 7.2.0 through 7.2.11 Description A classic buffer overflow occurs due to a buffer copy operation that does not verify the size of the input. This allows an...

Debian dla-4731 : libgd-dev - security update

The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4731 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4731-1 [email protected]...

PT-2026-71286

An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration handling allows an authenticated attacker to inject arbitrary configuration directives. By supplying newline characters within the 'nvidia.driver.capabilities' or 'nvidia.require.' configuration...

Linux Distros Unpatched Vulnerability : CVE-2026-73078

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/netrw/autoload/netrw.vi...

PT-2026-71315

An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue when processing output parameters from a stored procedure. Triggering this issue requires connecting to an untrusted or impersonated database server that returns crafted metadata. This may result in...

Fortinet Fortigate Stack buffer overflow in WAD (FG-IR-26-161)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-161 advisory. - A Stack-based Buffer Overflow vulnerability CWE-121 vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an...

Linux Distros Unpatched Vulnerability : CVE-2026-19560

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

PT-2026-71223

Name of the Vulnerable Software and Affected Versions Dell Display and Peripheral Manager DDPM Windows versions prior to 2.3.0.17 Description Improper Access Control allows a low privileged attacker with local access to potentially achieve Elevation of Privileges and execute arbitrary code...

PT-2026-71328

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...

PT-2026-71115

Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user customer, reseller to execute arbitrary code on behalf of the database server administrator...

PT-2026-71321

IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable configuration file...

Linux Distros Unpatched Vulnerability : CVE-2026-73248

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - calibre is an e-book manager. Prior to 9.12.0, calibre processes attacker-controlled compositetemplate metadata from a malicious EPUB, OPF, PDF, or similar file...

Linux Distros Unpatched Vulnerability : CVE-2026-19559

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

The vulnerability of the wp-login.php file within the WordPress content management system allows a hacker to execute arbitrary code.

The vulnerability of the wp-login.php file in the WordPress content management system is related to the lack of security measures taken to protect the website’s structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2026-19558

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Extensions in Google Chrome prior to 151.0.7922.137 allowed an attacker who convinced a user to install a malicious extension to execute...