Ubuntu 24.04 LTS : libvirt vulnerabilities (USN-8831-1)

The remote Ubuntu 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8831-1 advisory. It was discovered that libvirt had an integer overflow vulnerability in the NodeGetFreePages RPC handler. A local attacker could possibly use this issue ...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : pdfminer vulnerabilities (USN-8837-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8837-1 advisory. It was discovered that pdfminer did not safely parse specially crafted PDF files. An attacker could possibly use thes...

Amazon Linux 2 : gvfs (ALAS-2026-3943)

The version of gvfs installed on the remote host is prior to 1.36.2-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3943 advisory. A flaw was found in the SFTP backend in gvfs. When mounting a share and reading a file, a malicious SFTP server can cause readreply t...

CentOS 9 : unbound-1.26.1-1.el9

"The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the unbound-1.26.1-1.el9 build changelog. - In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under...

RHEL 9 : gawk (RHSA-2026:73512)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:73512 advisory. The gawk packages contain the GNU version of awk, a text processing utility. Awk interprets a special- purpose programming language to do...

Debian dsa-6527 : rsync - security update

The remote Debian 13 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-6527 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6527-1 [email protected] https://www.debian.org/securit...

RHEL 9 : freerdp (RHSA-2026:72481)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:72481 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP serve...

PT-2026-102832

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.92 Description A type confusion issue exists in V8, the open-source JavaScript and WebAssembly engine. This flaw allows a remote attacker to execute arbitrary code within the sandbox by inducing the...

PT-2026-102822

Name of the Vulnerable Software and Affected Versions Greek Universities Network GUnet Open eClass Platform version 3.15 Description A remote attacker can execute arbitrary code through the chat input field within the course module. This issue is a code injection, which occurs when an application...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95322): chromium -- security fixes

Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95343): chromium -- security fixes

Use after free in WebAudio in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95365): chromium -- security fixes

Type confusion in IndexedDB in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-89360

metatool-ai MetaMCP up to and including 2.4.22 is vulnerable to Code Execution in the internal MCP inspector proxy endpoint GET /mcp-proxy/server/stdio createTransport, STDIO branch, routers/mcp-proxy/server.ts...

CVE-2024-31026: Undefined Security Weakness

An issue in Greek Universities Network GUnet Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat input field in the course module...

KLA91306 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in ANGLE can be exploited...

CVE-2026-79403

Versions of Kilo Code prior to v7.4.1 are vulnerable to an issue that allows a local attacker to achieve arbitrary code execution . The vulnerability is accessible via the permission/allow-everything endpoint. While the technical root cause is not explicitly detailed in the provided documents, th...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95351): chromium -- security fixes

Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95339): chromium -- security fixes

Use after free in ServiceWorker in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95298): chromium -- security fixes

Use after free in Browser in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: High...

CVE-2024-31026

The Greek Universities Network (GUnet) Open eClass Platform v.3.15 is vulnerable to a code injection flaw. A remote attacker can exploit the chat input field within the course module to execute arbitrary code on the system. To remediate this issue, users should update the platform to a version th...