306696 matches found
The vulnerability of the Telnet Client command-line tool for Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Telnet Client command-line tool for Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the command-line interface of the PAN-OS operating system, allowing a perpetrator to execute arbitrary commands
The vulnerability of the command-line interface of the PAN-OS operating system is related to the failure to take measures to neutralize certain special elements. Exploiting this vulnerability allows a perpetrator to execute arbitrary commands on behalf of the root user...
CVE-2026-33960
Samsung Exynos Mobile and Wearable Processors (1330, 1380, 1480, 1580, 1680, W920, W930, W1000) are affected by an out-of-bounds write vulnerability triggered by a malformed ioctl command to the Wi-Fi interface device , which causes improper buffer size allocation. The impact is a denial of servi...
Medium: composer
Issue Overview: Package bin path can escape the package directory, bypassing the GHSA-gjfg-22fp-rrxx fix. A malicious or compromised Composer package could, when installed as a dependency, cause Composer to change the permissions of a file outside that package's own directory and to register a...
CVE-2026-33960
An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 1580, 1680, W920, W930, and W1000. . A malformed ioctl command to the Wi-Fi interface device can lead to improper buffer size allocation, resulting in an out-of-bounds write and causing a denial of...
MiracleLinux 8 : vim-8.0.1763-31.el8_10.7.ML.1 (AXSA:2026-1816:23)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1816:23 advisory. vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator CVE-2026-28420 vim: Vim: Denial of Servic...
PT-2026-91121
A security flaw has been discovered in memcached 1.6.41/1.6.42/1.6.43. This vulnerability affects the function try read command asciiauth of the file proto text.c of the component mcmc Tokenizer. The manipulation results in out-of-bounds read. It is possible to launch the attack remotely. The...
PT-2026-91211
Froxlor before 2.3.7 fails to validate the mysql server parameter against a customer's allowed mysqlserver allowlist in the Mysqls.add API command. Attackers can supply a disallowed server index to create MySQL databases and users on forbidden servers, bypassing per-customer access controls...
AlmaLinux 10 : ruby (ALSA-2026:50778)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:50778 advisory. zlib: zlib: Memory corruption via buffer overflow in Zlib::GzipReader CVE-2026-27820 net-imap: Net::IMAP: Arbitrary IMAP command injection via CRLF...
MAL-2026-16154 Malicious code in pino-ulid (npm)
The npm package pino-ulid is named like a ULID generator, but it is a remote-access trojan. On install, its package.json postinstall script runs node dist/node/utils.js after checking the dist files exist with existsSync. dist/node/utils.js writes a PID lock file, sets up persistence on Windows...
Amazon Linux 2023 : openssl, openssl-devel, openssl-fips-provider-latest (ALAS2023-2026-2136)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2136 advisory. Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKsenabled, and only the private key with no associated certificate configured locally,a NULL pointer dereferen...
MiracleLinux 9 : gpsd-minimal-3.26.1-2.el9_8.2 (AXSA:2026-1819:03)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1819:03 advisory. gpsd: gpsd: Arbitrary OS command execution via code injection in gpsprof utility CVE-2026-60122 Tenable has extracted the preceding description block directl...
RHEL 10 : rsync (RHSA-2026:67463)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67463 advisory. The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because...
ALSA-2026:67463 Important: rsync security, bug fix, and enhancement update
The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fixes:...
Command Path Injection
This plugin identifies PATH environment variables either at the system or user level that could be leveraged by a local attacker for path based command injection. Path command injection happens when a PATH places user controlled directories, relative paths or world writable directories ahead of...
EUVD-2026-77161
An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 1580, 1680, W920, W930, and W1000. . A malformed ioctl command to the Wi-Fi interface device can lead to improper buffer size allocation, resulting in an out-of-bounds write and causing a denial of...
Important: kernel
Issue Overview: In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADDADDR rtx: always decrease sk refcount CVE-2026-46158 In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: ADDADDR rtx: free sk if last CVE-2026-46170 In the Linux kernel, th...
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: Linux kernel: Denial of Service in qla2xxx SCSI driver due to improper command handling after chip reset CVE-2025-68745 kernel: drm/xe: Open-code GGTT MMIO access protection CVE-2026-2346...
Important: rsync security, bug fix, and enhancement update
The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fixes:...