266734 matches found
PT-2026-71746
IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a buffer overflow from improperly validating client data. By sending malformed requests to one of the host servers, a remote attacker could leverage this vulnerability to cause a denial-of-server DoS for that server...
Linux Distros Unpatched Vulnerability : CVE-2026-19588
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers. CVE-2026-19588 Note that Nessus relies on the presence...
RHEL 10 : freerdp (RHSA-2026:54486)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:54486 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...
RHEL 9 : gstreamer1-plugins-bad-free (RHSA-2026:54658)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:54658 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-bad-free package...
Vim < 9.2.0842 Stack-based Buffer Overflow (GHSA-49m8-wwxj-mr69)
The version of Vim installed on the remote host is prior to 9.2.0842. It is, therefore, affected by a vulnerability as referenced in the GHSA-49m8-wwxj-mr69 advisory. - The socket server backend in src/socketserver.c accepts unbounded client connections in socketserveraccept, causing descriptors ...
SUSE SLES12 Security Update : spice-vdagent (SUSE-SU-2026:3585-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3585-1 advisory. Security fixes: - CVE-2026-57965: integer overflow in udscswrite can lead to heap buffer overflow bsc1269553. - CVE-2026-57966:...
Linux Distros Unpatched Vulnerability : CVE-2026-14676
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap buffer overflow in PostgreSQL pgstatstatements allows the query author to execute arbitrary code as the operating system user running the database, via...
GLSA-202608-02 : FreeType: Multiple Vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202608-02 FreeType: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in FreeType. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly...
RockyLinux 10 : kernel (RLSA-2026:54343)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:54343 advisory. kernel: accel/ivpu: Fix signed integer truncation in IPC receive CVE-2026-53202 kernel: net/sched: actapi: use RCU with deferred freeing for action...
Linux Distros Unpatched Vulnerability : CVE-2026-68452
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/zcrypt: Validate length for CCA AES cipher key requests ccacipher2protkey derives the copy length for the CPRB parameter block directly from the length fie...
CVE-2026-53791
rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source address. Attackers who can connect directly to the rsync daemon can inject a...
UBUNTU-CVE-2026-73075
Vim is an open source, command line text editor. From 9.2.0469 until 9.2.0843, popupmarkopacityzindex in src/popupwin.c can use a negative wwinrow for a text-property-anchored popup with clipwindow and opacity, indexing before the screen array instead of accounting for wpopuptopoff and causing an...
PT-2026-71738
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a buffer overflow...
CVE-2026-26197 affecting package hdf5 for versions less than 1.14.6-4
CVE-2026-26197 affecting package hdf5 for versions less than 1.14.6-4. A patched version of the package is available...
CVE-2026-64543 affecting package kernel for versions less than 6.6.145.2-1
CVE-2026-64543 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-59850 affecting package libssh for versions less than 0.10.6-9
CVE-2026-59850 affecting package libssh for versions less than 0.10.6-9. A patched version of the package is available...
CVE-2026-59843 affecting package libssh for versions less than 0.10.6-9
CVE-2026-59843 affecting package libssh for versions less than 0.10.6-9. A patched version of the package is available...
CVE-2026-38752 affecting package busybox for versions less than 1.36.1-26
CVE-2026-38752 affecting package busybox for versions less than 1.36.1-26. A patched version of the package is available...