Oracle Linux 8 : perl-DBI:1.641 (ELSA-2026-85916)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-85916 advisory. - CVE-2026-88815 perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting read during numeric type casting Resolves: RHEL-2719...

Linux Distros Unpatched Vulnerability : CVE-2026-93517

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap buffer overflow in handling GLX RenderLarge request where dataBytes exceeds cmdlen in X.org X server before 21.1.25 and XWayland before 24.1.14 that coul...

nginx 1.30.x < 1.30.6 / 1.31.2 < 1.31.7 Heap Buffer Overflow

According to its Server response header, the installed version of nginx is 1.30.0 prior to 1.30.6, or 1.31.2 prior to 1.31.7. It is, therefore, affected by the following issue: - A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and the root...

AlmaLinux 8 : hplip (ALSA-2026:82295)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:82295 advisory. hplip: potential memory buffer overflow CVE-2020-6923 hplip: HP Linux Imaging and Printing Software - Use of DSA Key CVE-2025-43023 hplip: HPLIP: Multipl...

Ubuntu 24.04 LTS / 26.04 LTS / 26.10 : zlib vulnerability (USN-8954-1)

The remote Ubuntu 24.04 LTS / 26.04 LTS / 26.10 host has packages installed that are affected by a vulnerability as referenced in the USN-8954-1 advisory. Ali Firas discovered that zlib incorrectly handled certain non-blocking write operations. An attacker could possibly use this issue to trigger...

PT-2026-121859

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the iwlwifi mvm component where scheduled scans constructed probe requests before performing length validation via the iwl mvm scan fits function. This sequence allowe...

Rocky Linux 9.6 [TuxCare] Security Update: brotli / brotli-devel / libbrotli / python3-brotli (ALMALINUX9.6:CLSA-2026:1792755607)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792755607 advisory. - A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allow...

CVE-2026-111497

A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially...

SUSE CVE-2026-111183

GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with this library is required to exploit this vulnerability but attack vectors may vary...

Exploit for CVE-2026-109255

CVE-2026-109255 FreeRDP 3.0.0 before 3.32.0 contains an intege...

CVE-2026-96185

Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network...

CVE-2026-96185

A stack-based buffer overflow exists in Microsoft Exchange Online , which could allow an authorized attacker to achieve remote code execution over a network. The vulnerability is classified as HIGH severity with a CVSS score of 7.5. No specific exploit information or remediation details are provi...

CLSA-2026-1792704664 hplip: Fix of 6 CVEs

CVE-2026-91097: bound LEDM HTTP response copies to the caller's buffer in httpread of the SANE hpaio backend backport of HPLIP 3.26.6 - CVE-2026-91098: bound device-supplied data in the LEDM scan backend parsescanelements, bbstartscan, getsize backport of HPLIP 3.26.6 and RHEL 9 - CVE-2026-91101:...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Incorrect Calculation of Buffer Size in rsyslog (CVE-2026-78002)

Summary IBM Watson Speech Services Cartridge is vulnerable to Incorrect Calculation of Buffer Size in rsyslog due to a flaw in the RainerScript replace function. Rsyslog is used in our Speech Service Runtimes. This vulnerability has been addressed. Please read the details for remediation below...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in libxml2

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in libxml2. Libxml2 is used in our Speech Service Runtimes. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-74860 DESCRIPTION: A flaw was...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Heap-based Buffer Overflow in NLnet Labs Unbound (CVE-2026-81642, CVE-2026-81634, CVE-2026-82717)

Summary IBM Watson Speech Services Cartridge is vulnerable to a Heap-based Buffer Overflow in NLnet Labs Unbound that could result in remote code execution and DOS conditions. NLnet Labs Unbound is used as part of our Speech microservices. These vulnerabilities have been addressed. Please read th...

USN-8954-1 zlib vulnerability

Ali Firas discovered that zlib incorrectly handled certain non-blocking write operations. An attacker could possibly use this issue to trigger a heap buffer overflow, resulting in a denial of service or arbitrary code execution...

USN-8954-1: zlib vulnerability

Ali Firas discovered that zlib incorrectly handled certain non-blocking write operations. An attacker could possibly use this issue to trigger a heap buffer overflow, resulting in a denial of service or arbitrary code execution...

CVE-2026-95720

A buffer overflow vulnerability exists in AOS-8 that could allow an authenticated attacker with administrative access to cause denial of service. Successful exploitation could allow an attacker to crash the system, preventing it from rebooting without manual intervention and disrupting network...

CVE-2026-95713

An unauthenticated buffer overflow vulnerability exists in the command line interface of AOS-8. Successful exploitation could allow an unauthenticated remote attacker to disrupt the availability of the affected interface, along with limited access to or modification of some system data...