81 matches found
SUSE SLES16 Security Update : libssh (SUSE-SU-2026:22956-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22956-1 advisory. - CVE-2026-15370: stack buffer overflow in SFTP server longname construction bsc1272162. - CVE-2026-59843: denial of service via...
SUSE CVE-2026-59845
A flaw was found in libssh. When ProxyCommand is used, an unchecked fork failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service...
GHSA-89P7-7CQ3-HHR2 rm: 'rm -rf ./' (and ./// variants) silently deletes current directory contents, bypassing dot protection
rm -rf . is correctly refused, but cleantrailingslashes normalizes ./// to ./ while pathiscurrentorparentdirectory only matches ./.. and /.//.., not ./ or ../. So rm -rf ./ recursively deletes the directory's contents and then prints a misleading cannot remove './': Invalid input. Impact: all...
TencentOS Server 3: redis:6 (TSSA-2026:0554)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0554 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
RHEL 9 : redis (RHSA-2026:28139)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:28139 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and...
EUVD-2026-32119
An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dataapi.php files mb24configetTagAlarm function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality...
RockyLinux 8 : dovecot (RLSA-2026:13830)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:13830 advisory. dovecot: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command CVE-2025-59032 dovecot: denial of service via crafted...
Important: vim
Issue Overview: When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow, because Vim does not properly end visual mode and therefore may try to access beyond the end of a line in a buffer. In Patch 9.1.1003 Vim will correctl...
MGASA-2026-0069 Updated cmake packages fix security vulnerability
cmake cmForEachCommand.cxx ReplayItems assertion. CVE-2025-9301...
FreeBSD Security Advisory - FreeBSD-SA-26:07.nvmf
FreeBSD Security Advisory - On a system exposing an NVMe/TCP target, a remote client can trigger a kernel panic by sending a CONNECT command for an I/O queue with a bogus or stale CNTLID...
Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2026-1449)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-1999-0144
Denial of service in Qmail by specifying a large number of recipients with the RCPT command...
mcp-server-git argument injection in git_diff and git_checkout functions allows overwriting local files
In mcp-server-git versions prior to 2025.12.18, the gitdiff and gitcheckout functions passed user-controlled arguments directly to git CLI commands without sanitization. Flag-like values e.g., --output=/path/to/file for gitdiff would be interpreted as command-line options rather than git refs,...
EUVD-2017-18646
Malware in sbrugna...
EUVD-2000-0644
Malware in sbrugna...
EUVD-2005-3395
Malware in sbrugna...
EUVD-2021-15591
Malware in sbrugna...
EUVD-2018-3668
Malware in sbrugna...