SUSE SLES12 Security Update : gzip (SUSE-SU-2026:3590-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:3590-1 advisory. - CVE-2026-41992: global buffer overflow in the LZH decompression logic due to improper reuse of shared global state between different decompression...

Vim 9.2.0511 < 9.2.0844 Use-After-Free (GHSA-69ch-22ch-r887)

The version of Vim installed on the remote host is between 9.2.0511 and 9.2.0844 exclusive. It is, therefore, affected by a vulnerability as referenced in the GHSA-69ch-22ch-r887 advisory. - From 9.2.0511 until 9.2.0844, jsondecodeitem in src/json.c can retain a stale pointer after jsondecodestri...

RockyLinux 10 : freerdp (RLSA-2026:54486)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:54486 advisory. FreeRDP: FreeRDP: Remote code execution or denial of service via heap-based buffer overflow CVE-2026-64620 FreeRDP: FreeRDP: Double-free vulnerability...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-10.3.1.12)

The version of AHV installed on the remote host is prior to 10.3.1.12. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-10.3.1.12 advisory. - pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a...

Oracle Linux 8 : freerdp (ELSA-2026-54485)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-54485 advisory. 2:2.11.7-11 - Backport several CVE fixes CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580 Resolves: RHEL-213173, RHEL-222796, RHEL-22297...

Security Updates for Microsoft Excel Products C2R (August 2026)

The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Access of resource using incompatible type 'type confusion' in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. CVE-2026-65807 - Heap-based...

KLA91224 Multiple vulnerabilities in PostgreSQL

Multiple vulnerabilities were found in PostgreSQL. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Security vulnerability can be exploited to bypass...

Vulnerability in client (CVE-2026-19385)

PostgreSQL pgdump heap buffer overflow executes arbitrary code Heap buffer overflow in PostgreSQL pgdump of long function transform lists allows an object creator to execute arbitrary code as the operating system user running pgdump, via a crafted transform list. Versions before PostgreSQL 18.6,...

Vulnerability in contrib module (CVE-2026-14676)

PostgreSQL pgstatstatements heap buffer overflow executes arbitrary code Heap buffer overflow in PostgreSQL pgstatstatements allows the query author to execute arbitrary code as the operating system user running the database, via crafted queries containing array constants. Within major version 18...

Vulnerability in core server (CVE-2026-14677)

PostgreSQL 32-bit pltcl and plperl undersize allocations, via integer wraparound Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted function bodies. This may execute arbitra...

PT-2026-71657

Name of the Vulnerable Software and Affected Versions rsync versions 3.2.3 through 3.4.x Description An out-of-bounds write exists in the parse size arg function. The issue occurs because the return value of snprintf is used as an index for a .bss-segment array without proper bounds checking. Whe...

PT-2026-71816

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a heap buffer overflow...

Vulnerability of the kerberos_DecryptMessage() function in the winpr/libwinpr/sspi/Kerberos/kerberos.c file of the RDP client FreeRDP, which allows a intruder to disclose sensitive information and cause a denial-of-service attack.

The vulnerability of the kerberosDecryptMessage function in the winpr/libwinpr/sspi/Kerberos/kerberos.c file is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to disclose sensitive information and cause denial-of-service attacks...

The vulnerability of the wireless/ti/wlcore/tx.c component of the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the wireless/ti/wlcore/tx.c component in the Linux operating system is related to a violation of the buffer boundary. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-29035

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CivetWeb commit 4a4f0c95 contains a heap and stack buffer overflow vulnerability in the readwebsocket function that allows unauthenticated remote attackers to...

RHEL 10 : gstreamer1-plugins-bad-free (RHSA-2026:54659)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:54659 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package...

Linux Distros Unpatched Vulnerability : CVE-2026-19385

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap buffer overflow in PostgreSQL pgdump of long function transform lists allows an object creator to execute arbitrary code as the operating system user runni...

SUSE SLES15 Security Update : erlang26 (SUSE-SU-2026:3579-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3579-1 advisory. - CVE-2026-28810: predictable DNS transaction IDs can cause DNS cache poisoning bsc1261726. - CVE-2026-42789: publickey application...

Security Updates for Microsoft Word Products C2R (August 2026)

The Microsoft Word Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. CVE-2026-58651, CVE-2026-64915 - Stack-based buffer overflow in Microsof...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.3.1.14)

The version of AOS installed on the remote host is prior to 7.3.1.14. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.3.1.14 advisory. - A flaw was found in gnutls. Servers configured with RSA-PSK RivestShamirAdleman Pre-Shared Key wrongfully matched usernam...