PT-2026-58165

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A heap-based buffer overflow exists in the Windows Resilient File System ReFS. A heap-based buffer overflow occurs when a program writes more data to a heap memory...

CVE-2026-51105

CVE-2026-51105 affects aMULE-Project’s aMule 2.3.3. The root cause is a Buffer Overflow in the OP_SERVERMESSAGE Handler, enabling a remote attacker over the network with no user interaction to cause a denial of service. The CVSS indicates Network access, low complexity, no privileges, and a High ...

ROS-20260714-73-0012

The vulnerability in Wireshark is related to overflowing of buffers in the stack. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

ROS-20260714-73-0066

The vulnerability of the modproxyajp module in the Apache HTTP Server is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260714-73-0050

The vulnerability of the strlcat function in PostgreSQL PgBouncer software-related connectivity libraries is related to the issue of operations going beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service...

CVE-2026-51808

Buffer Overflow vulnerability in OpenHTJ2K v.0.18.4 and before allows an attacker to execute arbitrary code via the openhtj2kdecoderimpl::invoke, invokelinebased, invokelinebasedstream, and invokelinebasedpredecoded function in source/core/interface/decoder.cpp...

PT-2026-58080

Name of the Vulnerable Software and Affected Versions DBI versions prior to 1.651 Description Perl DBI fails to enforce statement handle consistency with the row. This occurs when the statement handle contains no fields while the source row is non-empty, causing the internal row-buffer helper to...

PT-2026-58559

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Microsoft SharePoint affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is...

PT-2026-58303

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description A stack-based buffer overflow exists in Active Directory Federation Services. This flaw allows an unauthorized attacker to cause a denial of service over a networ...

SUSE SLES12 Security Update : libpng15 (SUSE-SU-2026:2878-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:2878-1 advisory. This update for libpng15 fixes the following issue - CVE-2026-25646: heap buffer overflow vulnerability in pngsetdither/pngsetquantize bsc1258020...

AlmaLinux 10 : perl-DBI (ALSA-2026:38513)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:38513 advisory. DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution CVE-2026-9698 Tenable has extracted the preceding description block...

Security Updates for Microsoft SQL Server (July 2026)

The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over...

openSUSE 16: apache2-mod_php8 / php8 / php8-bcmath / php8-bz2 / php8-calendar / etc (openSUSE-SU-2026:21308-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21308-1 advisory. This update for php8 fixes the following issues - Update to versio 8.4.23 - CVE-2026-14355: The AES-WRAP-PAD algorithm implementation in OpenSSL...

RockyLinux 9 : xorg-x11-server (RLSA-2026:38486)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:38486 advisory. xorg: X11: xserver: X.org: glamor Font Atlas Heap Buffer Overflow CVE-2026-55999 Tenable has extracted the preceding description block directly from the RockyLin...

EulerOS 2.0 SP10 : glibc (EulerOS-SA-2026-2689)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Calling the ungetwc function on a FILE stream with wide characters encoded in a character set that has overlaps between its single byte and...

PT-2026-58541

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A buffer over-read exists in Microsoft Office Excel, which could allow an unauthorized attacker to execute code locally. A buffer over-read occurs when a program reads more dat...

openSUSE 16 Security Update : python-cryptography (openSUSE-SU-2026:21294-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21294-1 advisory. This update for python-cryptography fixes the following issues - CVE-2026-41676: openssl: Deriver:derive and PkeyCtxRef:derive can overflow shor...

MiracleLinux 9 : gnutls-3.8.10-4.el9_8 (AXSA:2026-1260:18)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1260:18 advisory. gnutls: Fix qsort comparator in DTLS reassembly CVE-2026-42009 gnutls: Fix crashing on an underflow with a DTLS datagram CVE-2026-33845 gnutls: Fix...

ROS-20260714-73-0060

The vulnerability of the ngxhttpcharsetmodule module in NGINX Plus and NGINX Open Source web servers relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information or cause...

ROS-20260714-73-0061

The vulnerability of the ngxhttpcharsetmodule module in NGINX Plus and NGINX Open Source web servers relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information or cause...