OESA-2026-4025 python-GitPython security update

GitPythonis a python library used to interact with Git repositories.GitPython provides object model read and write access to your git repository. Access repository information conveniently, alter the index directly, handle remotes, or go down to low-level object database access with big-files...

PT-2026-98858

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Improper limitation of a pathname to a restricted directory allows a remote attacker to obtain sensitive information, delete arbitrary files, or execute arbitrary code. Recommendations At t...

EUVD-2026-87083

Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via the pfBlockerNG package...

PT-2026-99099

Name of the Vulnerable Software and Affected Versions GNU libextractor versions prior to 1.16 Description The software loads plugins from an untrusted search path defined by the LIBEXTRACTOR PREFIX environment variable without performing proper privilege checks. A local attacker can manipulate th...

CVE-2026-78902: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via the pfBlockerNG package...

CVE-2026-84862: Deserialization of Untrusted Data

IBM Guardium Data Protection 12.2 is vulnerable to insecure deserialization in the Quartz JDBC job store. An authenticated attacker could exploit this vulnerability to execute arbitrary code on the affected system...

The vulnerability of the Squid proxy server, related to overflowing dynamic memory buffers, allows attackers to execute arbitrary code.

The vulnerability of the Squid proxy server is related to overflowing buffers in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the TY demultiplexer and the audio decoder in FFmpeg’s multimedia library allows a hacker to corrupt memory, cause system failures, or execute arbitrary code.

The vulnerability of the TY demultiplexer and the audio decoder in FFmpeg’s multimedia library is related to a numerical overflow issue. Exploiting this vulnerability can allow an attacker to corrupt memory, cause system failures, or execute arbitrary code...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : GStreamer Good Plugins vulnerabilities (USN-8798-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8798-1 advisory. It was discovered that GStreamer Good Plugins incorrectly parsed certain MRF files. A remote...

CVE-2026-78902

Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via the pfBlockerNG package...

CVE-2026-78902

A Cross Site Scripting (XSS) vulnerability exists in Netgate pfSense 26.03.1-RELEASE . This flaw specifically affects the pfBlockerNG package , potentially allowing an attacker to achieve arbitrary code execution . No specific remediation or exploit details are provided in the documents.

CVE-2026-88420

A reflected cross-site scripting XSS vulnerability in the EntryAbstract.save component of APSL puput v1.2.1 through v2.2.0 allows authenticated attackers with Wagtail Editor privileges to execute arbitrary code in the context of the victim's browser via a crafted payload...

The vulnerability of the Vim text editor, related to the use of an incomplete black list, allows a hacker to execute arbitrary code.

The vulnerability of the Vim text editor is related to the use of an incomplete black list. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Process_mrld() function in the lib/Image/ExifTool/GM.pm handler for JPEG/QuickTime/MOV/MP4 metadata processing, a library used for metadata processing in ExifTool multimedia files, allows a hacker to execute arbitrary code.

The vulnerability of the Processmrld function in the lib/Image/ExifTool/GM.pm handler for JPEG/QuickTime/MOV/MP4 metadata processing in the ExifTool library related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability could allow an attacker to execute...

RockyLinux 10 : libxml2 (RLSA-2026:71586)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:71586 advisory. libxml2: libxml2: Arbitrary code execution via heap-based buffer overflow CVE-2026-86138 libxml2: libxml2: Data integrity issues due to integer overflo...

The vulnerability of the Vim text editor, related to buffer overflow in dynamic memory, allows an attacker to execute arbitrary code.

The vulnerability of the Vim text editor is related to overflowing the buffer in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

SUSE SLES15 Security Update : freerdp (SUSE-SU-2026:1129-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1129-1 advisory. - CVE-2026-26271: Buffer Overread in FreeRDP Icon Processing bsc1258979. - CVE-2026-26955: Out-of-bounds Write in freerdp bsc1258982. -...

ROS-20260925-73-0004

The vulnerability of the slimproi2cblkwr function in the Linux kernel’s drivers/i2c/busses/i2c-xgene-slimpro.c file is related to the lack of control over the valid range of the value that can be passed to the “data-block0” variable. This value ranges from 0 to 255; without proper validation, thi...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : curl vulnerabilities (USN-8820-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8820-1 advisory. Eunsoo Kim discovered that curl incorrectly handled SASL negotiation for LDAP authentication ...

The vulnerability of the golang-x-net package in the Golang programming language arises from improper checking of the unsafe equivalence of input data. This allows attackers to circumvent existing security restrictions and execute arbitrary code.

The vulnerability of the golang-x-net package in the Golang programming language is related to improper checking of unsafe equivalence of input data. Exploiting this vulnerability allows an attacker to bypass existing security restrictions and execute arbitrary code...