CVE-2026-95508

A heap-based buffer overflow was found in the DHCPv6 and TFTP response builders of libslirp. When the host is configured with a small interface MTU, a guest-supplied DHCPv6 CLIENTID option or TFTP blksize option can overflow the reply buffer with attacker-controlled content and length, resulting ...

Security update for freeipmi

This update for freeipmi fixes the following issues: CVE-2026-50031: Denial of service via buffer overflow in ipmi-oem client bsc1267605. CVE-2026-85504: stack-based buffer overflow via malformed Fujitsu SEL long-text responses bsc1278719. CVE-2026-85505: Denial of Service via stack-based buffer...

SUSE-SU-2026:4277-1 Security update for freeipmi

This update for freeipmi fixes the following issues: - CVE-2026-50031: Denial of service via buffer overflow in ipmi-oem client bsc1267605. - CVE-2026-85504: stack-based buffer overflow via malformed Fujitsu SEL long-text responses bsc1278719. - CVE-2026-85505: Denial of Service via stack-based...

CVE-2026-75676: Stack-based Buffer Overflow

Bridge is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2026-96956

Name of the Vulnerable Software and Affected Versions UniFi gateway devices affected versions not specified Description A network-based actor can exploit an Out-of-bounds Write—a condition where data is written outside the intended memory boundary—to trigger a Denial of Service DoS attack, causin...

PT-2026-96935

pH7Software pH7Builder pH7 Social Dating CMS through 18.2.0 resolves the client IP address in protected/framework/Ip/Ip.class.php from the HTTP CLIENT IP and HTTP X FORWARDED FOR headers without verifying the request comes from a trusted proxy. Because the admin login attempt counter and lockout...

PT-2026-96803

Name of the Vulnerable Software and Affected Versions SLC8000 versions prior to 9.7.0.2 SLC9000 versions prior to 9.7.0.2 EMG8500 versions prior to 9.7.0.1 EMG7500 versions prior to 9.7.0.1 SLB882 affected versions not specified SLCx-03 affected versions not specified SLCx-02 affected versions no...

PT-2026-96840

Name of the Vulnerable Software and Affected Versions glibc versions 2.14 through 2.44 Description A stack-based buffer overflow exists in the dynamic loader ld.so of the GNU C Library. This issue occurs when a setuid/setgid AT SECURE program has a DT RPATH or DT RUNPATH that starts with $ORIGIN...

PT-2026-96686

Name of the Vulnerable Software and Affected Versions libslirp affected versions not specified Description A heap-based buffer overflow exists in the DHCPv6 and TFTP response builders. This occurs when the host is configured with a small interface MTU Maximum Transmission Unit, which is the maxim...

CVE-2026-75649: Heap-based Buffer Overflow

Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: hdf5 (UTSA-2026-054072)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054072 advisory. An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Tcopy in H5T.c. Tenable has extracted the preceding...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000535)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000535 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0101. Tenable has extracted the preceding description block directly from the Unity Linux securi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002329)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002329 advisory. Heap based buffer overflow in vim/vim 9.0.0946 and below by allowing an attacker to CTRL-W gf in the expression used in the RHS of the substitute command. Tenable ha...

SUSE SLED15 / SLES15 Security Update : jq (SUSE-SU-2026:4275-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4275-1 advisory. Security issues fixed: - CVE-2015-8863: heap buffer overflow in tokenadd function bsc976992. - CVE-2023-50246:...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002322)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002322 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1144. Tenable has extracted the preceding description block directly from the Unity Linux securi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: hdf5 (UTSA-2026-054070)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054070 advisory. An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Osdspacedecode in H5Osdspace.c. Tenable has extracte...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2023-002317)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002317 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1376. Tenable has extracted the preceding description block directly from the Unity Linux securi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: dnsmasq (UTSA-2026-090240)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090240 advisory. A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with DNSSEC data. An...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000562)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000562 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. Tenable has extracted the preceding description block directly from the Unity Linux security...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000539)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000539 advisory. Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0044. Tenable has extracted the preceding description block directly from the Unity Linux securi...