SUSE SLES15: postgresql15 / postgresql15-contrib / postgresql15-devel / etc (SUSE-SU-2026:4017-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4017-1 advisory. - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE...

Linux Distros Unpatched Vulnerability : CVE-2026-54692

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to 1.0.0, sailcodecloadframev8xbm i...

SUSE SLES15 Security Update : dracut (SUSE-SU-2026:3997-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3997-1 advisory. Update to version 059+suse.730.g73d3411aa. - CVE-2026-6893: improper handling and escaping of DHCP options can lead to command...

RHEL 8 : libtiff (RHSA-2026:69095)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:69095 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: libtiff: Arbitrar...

RHEL 8 : dracut (RHSA-2026:69119)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69119 advisory. The dracut packages contain an event-driven initial RAM file system initramfs generator infrastructure based on the udev device manager. Th...

EulerOS Virtualization 2.10.1 : sqlite (EulerOS-SA-2026-3856)

According to the versions of the sqlite packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to caus...

SUSE SLES15 Security Update : postgresql18 (SUSE-SU-2026:4015-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4015-1 advisory. - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE...

The vulnerability of the Promise.prototype.finally() function in the vm2 package manager of NPM allows a attacker to execute arbitrary code.

The vulnerability of the Promise.prototype.finally function in the vm2 package manager of NPM is related to a data protection mechanism flaw. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability of the Failover Cluster component for Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Failover Cluster component for Windows operating systems is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

ROS-20260921-73-0134

The vulnerability in Golang is related to incorrect verification of the cryptographic signature. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the setUPnPCfg function in TOTOLINK A3300R router microprogramming software allows a intruder to execute arbitrary commands.

The vulnerability of the setUPnPCfg function in TOTOLINK A3300R router microprogramming systems is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2026-78847

An issue in gray-matter All versions verified on 4.0.3 allows the JavaScript engine in lib/engines.js using eval to parse front matter when language is js/javascript.This allows arbitrary code execution...

ROS-20260921-73-0137

The vulnerability in libxml2 is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-55563: Incorrect Authorization

Feast is the open source feature store for AI and machine learning. Prior to 0.65.0, .github/workflows/printegrationtests.yml uses pullrequesttarget with the synchronize event and preserves ok-to-test, approved, or lgtm labels across newly pushed commits, allowing a fork contributor to obtain...

CVE-2026-52835: Improper Limitation of a Pathname to a Restricted Directory

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to 2.17.2, the importconfig handler and the databasefile branch of importdatabase in plexpy/webserve.py join the attacker-controlled configfile.filename or databasefile.filename directly to CACHEDIR without...

CVE-2026-62369: Improper Limitation of a Pathname to a Restricted Directory

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.16.0 until 1.21.2, 1.22.2, and 1.23.1, the DecompressTarGz function in keadm/cmd/keadm/app/cmd/util/common.go joins archive entry names to the extraction destinatio...

CVE-2026-67827: Undefined Security Weakness

Incorrect Access Control in the HTTP API module in ZLMediaKit commit 9fd5152 allows remote attackers to achieve Remote Code Execution RCE via unauthenticated access to the setServerConfig API endpoint, which permits overwriting the ffmpeg.snap configuration parameter with arbitrary shell commands...

The vulnerability of the tls.setDefaultCACertificates() function in the vm2 package manager NPM allows a attacker to execute arbitrary code.

The vulnerability of the tls.setDefaultCACertificates function in the vm2 package manager’s NPM library is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of DHCP servers for Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of DHCP servers for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the NPM package manager vm2 library, related to the use of a name with an incorrect reference, allows attackers to execute arbitrary code.

The vulnerability of the NPM package manager’s vm2 library is related to the use of a name with an incorrect reference. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...