Oracle Linux 9 : python-pyasn1 (ELSA-2026-59242)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-59242 advisory. - Fix CVE-2026-59886: prevent overflow in Real type float conversion Tenable has extracted the preceding description block directly from the Oracle Linux...

The vulnerability of the kvm_eiointc regs_access() function in the arch/loongarch/kvm/intc/eiointc.c module, which is part of the LoongArch architecture support for the Linux operating system, allows a attacker to cause a service failure.

The vulnerability of the kvmeiointc regsaccess function in the arch/loongarch/kvm/intc/eiointc.c module of the LoongArch architecture support for the Linux operating system is related to incorrect conversion of numerical value types. Exploiting this vulnerability could allow an attacker to cause ...

The vulnerability of the team_setup_by_port() function in the drivers/net/team/team_core.c file of the Linux kernel’s network device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the teamsetupbyport function in the drivers/net/team/teamcore.c file of the Linux kernel’s network device driver module is related to type conversion errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

python-pyasn1 security update

0.4.8-7.1 - Fix CVE-2026-59886: prevent overflow in Real type float conversion - Resolves: RHEL-217915...

PT-2026-81215

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An integer overflow exists in the WebRTC component. The issue occurs in the RTCRtpSender.setParameters path, where a WebIDL unsigned long maxBitrate is converted into a signed C++ int,...

PT-2026-81377

Name of the Vulnerable Software and Affected Versions NI LabVIEW versions prior to 2026 Q3 Description An integer conversion issue occurs when loading images, leading to an out-of-bounds read, which is a condition where the software reads data outside the intended memory boundary. This can result...

PT-2026-81418

Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.3.0 through 3.3.12 OpenEXR versions 3.4.0 through 3.4.13 Description A heap out-of-bounds write occurs when the exrmetrics tool processes a specially crafted deep scanline EXR file. This happens when using pixel conversion...

CVE-2026-59187: Heap-based Buffer Overflow

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions 3.3.0 through 3.3.12 and 3.4.0 through 3.4.13 are vulnerable to a heap out-of-bounds write when exrmetrics reads a crafted deep scanline EXR. This occur...

AZL-97923 CVE-2026-52492 affecting package libtiff 4.6.0-14

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image...

DEBIAN-CVE-2026-52492

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image...

CVE-2026-32476

Unauthenticated Cross Site Scripting XSS in Brave Conversion Engine PRO = 0.8.6 versions...

CVE-2026-32476 WordPress Brave Conversion Engine (PRO) plugin <= 0.8.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Brave Conversion Engine PRO = 0.8.6 versions...

CVE-2026-32476 WordPress Brave Conversion Engine (PRO) plugin <= 0.8.6 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Brave Conversion Engine PRO = 0.8.6 versions...

EUVD-2026-64800

Unauthenticated Cross Site Scripting XSS in Brave Conversion Engine PRO = 0.8.6 versions...

CVE-2026-32476

An unauthenticated Cross-Site Scripting (XSS) vulnerability affects the Brave Conversion Engine (PRO) WordPress plugin (slug: bravepopup-pro ) in versions ≤ 0.8.6 . The flaw requires user interaction (CVSS 3.1 vector: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L, score 7.1 HIGH with a Changed scope, indic...

WordPress Brave Conversion Engine (PRO) plugin <= 0.8.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Brave Conversion Engine PRO versions = 0.8.6...

The vulnerability in the Firefox web browser and Thunderbird email client, related to data type conversion errors, allows attackers to access confidential data.

The vulnerability in the Firefox web browser and Thunderbird email client is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to gain access to confidential data remotely...

The vulnerability of components related to DRM/AMDKFD in Linux kernel components, which allows a hacker to trigger a service failure.

The vulnerability of DRM/AMDKFD components in Linux operating systems is related to the lack of data type conversion mechanisms. Exploiting this vulnerability can allow attackers to cause service failures...

PT-2026-80833

Unauthenticated Cross Site Scripting XSS in Brave Conversion Engine PRO = 0.8.6 versions...

CVE-2026-52492

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image...