EulerOS 2.0 SP15 : perl-IO-Compress (EulerOS-SA-2026-3814)

According to the versions of the perl-IO-Compress packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob.x000D...

The vulnerabilities of the ASN.1 software for network security management and the network interface devices Check Point Security Gateway and Check Point Spark Firewall allow attackers to execute arbitrary code.

The vulnerability of the ASN.1 software for network security management and the network interface devices Check Point Security Gateway and Check Point Spark Firewall are related to buffer overflow in dynamic memory. Exploitation of this vulnerability could allow a malicious actor to execute...

The vulnerability of the EmailTrack component in the cPanel web hosting control panel allows a hacker to execute arbitrary code and gain full control over the server.

The vulnerability of the EmailTrack component in the cPanel web hosting control panel is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and gain full control over the server...

The vulnerability of the Flask-Reuploaded file loading library, related to deficiencies in the mechanism for processing registry-dependent data, allows attackers to execute arbitrary code.

The vulnerability of the Flask-Reuploaded file loading library is related to deficiencies in the mechanism for processing registry-dependent data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

RHEL 8 : gstreamer1-plugins-base (RHSA-2026:68503)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:68503 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a...

EulerOS 2.0 SP15 : libinput (EulerOS-SA-2026-3808)

According to the versions of the libinput packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In libinput before 1.30.4 and 1.31.x before 1.31.3, libinput-device-group unescaped phys output can inject udev properties leading to arbitrary...

EulerOS 2.0 SP15 : EDK2 (EulerOS-SA-2026-3800)

According to the versions of the EDK2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack buffer overflow...

CVE-2026-91738

Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-91722

Use after free in Input in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-91716

Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-82717

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation options could lead to remote code execution. The vulnerability starts when CNAME synthesis during an upstream response needs to...

Security update for perl-Net-DNS (moderate)

openSUSE security update: security update for perl-net-dns ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21859-1 Rating: moderate References: bsc1272212 bsc1272214 bsc1278084 Cross-References: CVE-2026-64193 CVE-2026-64194 CVE-2026-81928 CVSS...

RockyLinux 10 : libevent (RLSA-2026:67909)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67909 advisory. libevent: Libevent: Denial of Service via malformed RPC data CVE-2026-63383 libevent: Libevent: Off-by-one stack buffer overflow leading to denial of...

Google Chrome < 153.0.8010.52 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 153.0.8010.52. It is, therefore, affected by multiple vulnerabilities as referenced in the 202609stable-channel-update-for-desktop0194356994 advisory. - Use after free in PDFium in Google Chrome prior to 153.0.8010.52...

EulerOS 2.0 SP15 : sqlite (EulerOS-SA-2026-3798)

According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process...

UBUNTU-CVE-2026-91839

credential newline injection permits local root code execution...

UBUNTU-CVE-2026-82717

In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation options could lead to remote code execution. The vulnerability starts when CNAME synthesis during an upstream response needs to...

Linux Distros Unpatched Vulnerability : CVE-2026-91100

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potential...

EulerOS 2.0 SP15 : vim (EulerOS-SA-2026-3824)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave in...

EulerOS 2.0 SP15 : vim (EulerOS-SA-2026-3799)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave in...