CVE-2026-103226

A vulnerability was identified in Artifex Ghostscript up to 10.09.0. Affected is the function type1callsubr of the file devices/vector/gdevpsfx.c of the component Pdfwrite. The manipulation leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit is publicl...

Linux Distros Unpatched Vulnerability : CVE-2026-63292

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in modvhostalias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a...

CVE-2026-103242

A heap-based buffer overflow flaw was found in rpm. RPMTAGFILESIGNATURES in a crafted, unsigned RPM package's main header is declared with the wrong header type, causing hex2binv to allocate a one-byte buffer and then write the tag's attacker-controlled, hex-decoded content — of attacker-chosen...

CVE-2026-101283

iperf3 3.20–3.21 esnet/iperf has a pre-auth heap buffer overflow in decryptrsamessage: a 256-byte RSA buffer is BIOread with the attacker-controlled ciphertext length guard warns only, so an unauthenticated client overflows the heap via an oversized authtoken; fixed in 3.22...

CVE-2026-102505

Imager versions before 1.037 for Perl overflow a heap buffer fetching float samples from a paletted image in igsampffp. For a paletted image, getsamples with type "float" allocates a buffer of one sample per pixel and fetches every requested channel of each pixel into it. Requesting more than one...

ROS-20261002-73-0149

The vulnerability of the gbase64encodeclose function in the GLib library is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to cause a service failure...

SUSE SLED15: libpython3_13-1_0 / python313 / python313-base / python313-curses / etc (SUSE-SU-2026:4401-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4401-1 advisory. Security issues fixed: - CVE-2026-6879: quadratic behavior in xml.etree.ElementPath index predicates can lead ...

RockyLinux 9 : gvfs (RLSA-2026:74370)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:74370 advisory. gvfs: SFTP: heap-based buffer overflow in readreply CVE-2026-84268 gvfs: gvfs-admin socket ownership race permits local root CVE-2026-88924 Tenable has...

RHEL 9 : libvirt (RHSA-2026:74424)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:74424 advisory. The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems...

ghostscript security update

9.54.0-19.1 - RHEL-264921 CVE-2026-39919 ghostscript: Heap buffer overflow in JPEG 2000 JPXDecode output adapter...

RHEL 9 : ghostscript (RHSA-2026:74457)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:74457 advisory. The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats...

PT-2026-104299

Name of the Vulnerable Software and Affected Versions Tenda HG7 affected versions not specified Tenda HG9 affected versions not specified Tenda HG10 300001138 en xpon affected versions not specified Description A stack-based buffer overflow occurs in the Boa Web Server component due to improper...

openSUSE 16 Security Update : aria2 (openSUSE-SU-2026:21997-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21997-1 advisory. Changes in aria2: - CVE-2026-75421: stack buffer underflow in IOFile::getLine when a line begins with a NUL byte boo1276754 - Fix build with Nettle 4.0...

Siemens SIMATIC S7-1500 CPU 1518 MFP Incorrect Calculation of Buffer Size (CVE-2026-43501)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid506010; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...

Linux Distros Unpatched Vulnerability : CVE-2026-103678

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in tnef. An attacker can exploit this vulnerability by providing a specially crafted file containing uncompressed Rich Text Format RTF data...

ROS-20261002-73-0068

The vulnerability of regular expression functions in the PostgreSQL database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Rocky Linux 8 [CIQ] Security Update: gvfs / gvfs-afc / gvfs-afc-debuginfo / gvfs-afp / etc (crlsa-2026_73997)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202673997 advisory. gvfs: SFTP: heap-based buffer overflow in readreply CVE-2026-84268 Tenable has extracted the preceding description block directly from the CIQ security advisory...

Debian dla-4813 : iscsiuio - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4813 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4813-1 [email protected]...

PT-2026-104203

Name of the Vulnerable Software and Affected Versions Apache Thrift versions prior to 0.25.0 Description A heap-based buffer overflow exists in the C++ THeaderTransport component. When the ZLIB transform is enabled for sent frames, the transform function copies the compressed frame into the write...

ImageMagick < 6.9.13-51 / 7.x < 7.1.2-26 Heap Buffer Over-Write

The remote host has a version of ImageMagick installed that is prior to 6.9.13-51, or 7.x prior to 7.1.2-26. It is, therefore, affected by a vulnerability. - ImageMagick before 7.1.2-26 and 6.9.13-51 contains a heap-based buffer over-write vulnerability that occurs when running an X11 import with...