329794 matches found
Unity Linux 20.1070a Security Update: libXfont2 (UTSA-2026-141793)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-141793 advisory. A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties before libXfont2 before 2.0.8...
RHEL 9 : fetchmail (RHSA-2026:86981)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:86981 advisory. Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail...
RHEL 8 : flatpak (RHSA-2026:80687)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:80687 advisory. Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: Flatpak:...
Microsoft Access Code Execution
The vulnerability of Microsoft Access database management systems, as well as Microsoft Office and 365 Apps for Enterprise applications, is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
Linux Distros Unpatched Vulnerability : CVE-2026-109256
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP 3.10.0 through 3.32.2 contains a heap buffer overflow in the WinPR pngwritedata callback that writes past the buffer after a realloc failure. A maliciou...
Important: xorg-x11-server-Xwayland security update
Xwayland is an X server for running X clients under Wayland. Security Fixes: xorg-x11-server: xorg-x11-server: Arbitrary code execution via use-after-free in passive grab handling CVE-2026-93516 xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests...
Moderate: fetchmail security update
Fetchmail is a remote mail retrieval and forwarding utility intended for use over on-demand TCP/IP links, like SLIP or PPP connections. Fetchmail supports every remote-mail protocol currently in use on the Internet POP2, POP3, RPOP, APOP, KPOP, all IMAPs, ESMTP ETRN, IPv6, and IPSEC for retrieval...
AlmaLinux 10 : wireshark (ALSA-2026:84721)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:84721 advisory. wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash CVE-2026-76886 wireshark: Wireshark: Denial of Service via RRC protocol...
Rocky Linux 10.2 [CIQ] Security Update: wireshark / wireshark-cli / wireshark-cli-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_84721)
The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202684721 advisory. wireshark: Wireshark: Denial of Service via C12.22 protocol dissector crash CVE-2026-76886 wireshark: Wireshark: Denial of Service via RRC protocol...
Linux Distros Unpatched Vulnerability : CVE-2026-92183
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...
TOTOLINK EX200 buffer error vulnerability
The TOTOLINK EX200 version 5.2.3c.7200 contains a buffer error vulnerability. This vulnerability arises from the stack buffer overflow caused by the setWiFiAclAddConfig function in the file /cgi-bin/cstecgi.cgi when processing the macAddress parameter. Attackers can exploit this vulnerability...
AlmaLinux 10 : librabbitmq (ALSA-2026:84795)
The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:84795 advisory. rabbitmq-c: rabbitmq-c: Heap buffer overflow leading to denial of service CVE-2026-44236 Tenable has extracted the preceding description block directly from the...
AlmaLinux 8 : fetchmail (ALSA-2026:86982)
The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:86982 advisory. fetchmail: fetchmail: stack-based buffer overflow in NTLM authentication fetchmail-SA-2026-01 CVE-2026-94184 Tenable has extracted the preceding description block...
SUSE CVE-2026-110758
Text::CSVXS versions before 1.65 for Perl read before the start of an all-blank field under allowwhitespace in striptrailwhitespace. Under allowwhitespace, striptrailwhitespace removes trailing spaces and tabs from each unquoted field without stopping at the start of the field. For a field of onl...
SUSE CVE-2026-112393
Pillow is a Python imaging library. From 2.0.0 until 13.0.0, Pillow has a heap buffer overflow and stale-heap disclosure in tiffWriteProc when saving compressed TIFF data through libtiff to a target without a usable fileno, such as BytesIO. The callback sizes its allocation from the prior buffer...
CLSA-2026-1789661605 python: Fix of 3 CVEs
CVE-2026-9669: fix a stack buffer overflow in the bz2 module when a BZ2Decompressor object is reused after a decompression error; the decompressor now becomes unusable once libbz2 reports an error, instead of resuming from an invalid internal state...
CLSA-2026-1792537208 libevent: Fix of 5 CVEs
CVE-2026-63383: fix out-of-bounds read in decodetaginternal - CVE-2026-63384: reject payload lengths above INTMAX in evtagunmarshalheader - CVE-2026-63387: fix off-by-one stack buffer overflow in dnsnametolabels - CVE-2026-63385: reject HTTP header values containing CR or LF - CVE-2026-63382:...
CLSA-2026-1792536579 libevent: Fix of 5 CVEs
CVE-2026-63383: fix out-of-bounds read in decodetaginternal - CVE-2026-63384: reject payload lengths above INTMAX in evtagunmarshalheader - CVE-2026-63387: fix off-by-one stack buffer overflow in dnsnametolabels - CVE-2026-63385: reject HTTP header values containing CR or LF - CVE-2026-63382:...
