ROS-20260819-73-0034

The vulnerability in Vim is related to writing beyond the buffer’s memory boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

ROS-20260819-73-0046

The vulnerability of the vobsubreadidx function in the file /src/mediatools/vobsub.c of the MP4Box component of the GPAC multimedia platform is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-68765

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hashcat master branch builds after v7.1.2 contain a heap buffer overflow vulnerability in the KeePass AESKDF/KDBX v4 module module 34301 that allows attackers t...

UBUNTU-CVE-2026-73073

Vim is an open source, command line text editor. Prior to 9.2.0845, St...

UBUNTU-CVE-2026-74987

Internally found bugs present in Thunderbird ESR 140.13, Thunderbird E...

CVE-2026-74990

Internally found bugs present in Thunderbird ESR 140.13, Thunderbird E...

Photon OS 5.0: Postgresql15 PHSA-2026-5.0-92-0959

An update of the postgresql15 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0959. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2026-75976 TRENDnet TEW-823DRU NVRAM wan.cgi strcpy stack-based overflow

A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy of the file /cgi-bin/wan.cgi of the component NVRAM. This manipulation of the argument wanl2tppassword causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been ma...

CVE-2026-75976

TRENDnet TEW-823DRU router firmware 1.1.02b01 contains a stack-based buffer overflow in the strcpy call within /cgi-bin/wan.cgi (NVRAM component), triggered by the wan_l2tp_password argument. CVSS 9.9 (CRITICAL) reflects remote, unauthenticated-exploitable complete confidentiality/integrity/avail...

MINI-MPRX-XG7H-2RGP

Bulletin has no description...

MINI-5M3X-HF5M-W8PH

Bulletin has no description...

CVE-2026-70921

creationtimestamp| type| source ---|---|--- 2026-08-18 22:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfas4vv4m2c 2026-08-18 22:23:12+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfaxqzrld2b 2026-08-19 17:51:55+00:00| seen|...

CVE-2026-76046

Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-76046

Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-76036

Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-76034

Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-76036

Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

DEBIAN-CVE-2026-76034

Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-50142

libheif 1.19.0–1.23.0 is vulnerable to denial-of-service via crafted HEIF sequences: Box_stsz::parse() omits bound checks in fixed-size mode, and Track::load() 32-bit arithmetic wraparound bypasses consistency checks, allowing multi-gigabyte allocations. No in-the-wild exploitation reported. Fixe...

CVE-2026-59250

A flaw was found in the Erlang/OTP megaco flex scanner C driver. A remote, unauthenticated attacker can exploit a buffer overflow vulnerability by sending a specially crafted H.248/Megaco message with an oversized property parameter name. This can lead to memory corruption, potentially allowing f...