The vulnerability of the KGSL driver for graphics processors in Qualcomm’s embedded software allows a hacker to enhance their privileges and execute arbitrary code.

The vulnerability of the KGSL driver for graphics processors in Qualcomm’s embedded software lies in the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to elevate their privileges to root level and execute arbitrary code...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102069)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102069 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: reserve enough transaction items for qgroup ioctls Currently our qgroup ioctls don't...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ffmpeg (UTSA-2026-102703)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102703 advisory. A heap-buffer-overflow write exists in jpeg2000dec FFmpeg which allows an attacker to potentially gain remote code execution or cause denial of service via the chann...

UBUNTU-CVE-2026-18295

GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution V...

Linux Distros Unpatched Vulnerability : CVE-2026-18306

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected...

PT-2026-79485

There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS versions 11.5 and prior which may allow a remote, unauthenticated attacker to create a crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser. Users working with...

UBUNTU-CVE-2026-18307

GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution...

openSUSE 16 Security Update : go1.25 (openSUSE-SU-2026:21592-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21592-1 advisory. Update to go1.25.13 released 2026-08-13, bsc1244485. Security issues fixed: - CVE-2026-33818: encoding/asn1: unenforced recursion limit can lead...

Microsoft Edge (Chromium) < 151.0.4129.101 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 151.0.4129.101. It is, therefore, affected by multiple vulnerabilities as referenced in the August 20, 2026 advisory. - Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute...

...[ More ]

Flowise versions from 2.2.7 prior to 3.1.2 are vulnerable to remote code execution through the Custom MCP Model Context Protocol node configuration. The vulnerability exists in the /api/v1/node-load-method/customMCP endpoint, which accepts arbitrary command and argument configurations for MCP...

openSUSE 16 Security Update : gitea-tea (openSUSE-SU-2026:21603-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21603-1 advisory. Changes in gitea-tea: - Update to 0.15.1, bringing in the 0.14.2/0.15.0/0.15.1 upstream changes below bsc1253576: CVE-2025-47913:...

Microsoft Entra ID Deserialization of Untrusted Data Vulnerability

Microsoft Entra ID formerly known as Azure Active Directory contains a deserialization of untrusted data vulnerability which could allow an unauthorized attacker to execute code over a network...

UBUNTU-CVE-2026-18304

GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerabi...

ROS-20260821-73-0022

The vulnerability of the dxprobe function in the fs/ext4/namei.c module of the Ext4 file system in the Linux operating system is related to the lack of code to verify the return value of this function. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

UBUNTU-CVE-2026-18300

GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerabi...

UBUNTU-CVE-2026-18308

GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerabi...

The vulnerability of the Metabase data visualization and reporting software lies in the lack of security measures for query structures, allowing attackers to enhance their privileges and execute arbitrary code.

The vulnerability of the Metabase data visualization and reporting software relates to the lack of measures taken to protect the SQL query structure during the processing of the resetpassword parameter. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute...

UBUNTU-CVE-2026-18298

GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Exec...

PT-2026-79416

Name of the Vulnerable Software and Affected Versions FreeRTOS-Kernel versions prior to 11.3.1 Description Improper input validation may allow an unprivileged task on MPU-enabled ports to execute code in privileged kernel context. MPU Memory Protection Unit is a hardware component that monitors...

PT-2026-79386

SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to code injection via an X-Spip-Filtre HTTP request header that is mishandled by analyse resultat skel...