85332 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-91767
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phpopensslmatcheswildcardname in ext/openssl/xpssl.c underflows the length argument passed to memchr when a TLS server certificate presents a wildcard name whos...
PHP 8.4.x < 8.4.26 Multiple Vulnerabilities
The version of PHP installed on the remote host is prior to 8.4.26. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.4.26 advisory. - Debian Linux - php8.2 - None php8.4 - None CVE-2025-1218, CVE-2025-14181, CVE-2026-6103, CVE-2026-91765, CVE-2026-91766,...
Linux Distros Unpatched Vulnerability : CVE-2026-88815
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sqltypecastsvpv. When casting to SQLNUMERIC, sqltypecastsvpv passes the strin...
Linux Distros Unpatched Vulnerability : CVE-2025-14181
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed t...
PHP 8.2.x < 8.2.34 Multiple Vulnerabilities
The version of PHP installed on the remote host is prior to 8.2.34. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.2.34 advisory. - Debian Linux - php8.2 - None php8.4 - None CVE-2025-1218, CVE-2025-14181, CVE-2026-6103, CVE-2026-91765, CVE-2026-91766,...
Linux Distros Unpatched Vulnerability : CVE-2026-92842
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is...
Linux Distros Unpatched Vulnerability : CVE-2026-91768
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowedclients matches on a /96 prefix...
Linux Distros Unpatched Vulnerability : CVE-2026-42394
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - dovecot - None Ubuntu Linux - sieve: symlink traversal flaw could result in arbitrary file disclosure CVE-2026-42394 Note that Nessus relies on t...
Linux Distros Unpatched Vulnerability : CVE-2026-91766
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When the http:// stream wrapper follows a redirect it forwards the user-supplied Authorization, Cookie and Proxy-Authorization headers unchanged, even when the...
Linux Distros Unpatched Vulnerability : CVE-2026-6103
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - phartarnumber parses the octal size field of a TAR header into a uint32t with no overflow check. The field is 11 octal digits wide and holds values up to...
Linux Distros Unpatched Vulnerability : CVE-2026-95811
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Lemonldap::NG::Handler versions from 2.0.0 before 2.16.10, from 2.17.0 before 2.21.6, from 2.22.0 before 2.23.4 for Perl allow an equivalent spelling of a path ...
Linux Distros Unpatched Vulnerability : CVE-2026-88816
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName. fetchrowhashref uses the string pointer of the...
Linux Distros Unpatched Vulnerability : CVE-2026-93682
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value, the redirect code reads one byte past the end of...
Linux Distros Unpatched Vulnerability : CVE-2025-1218
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them. A malicious or compromise...
Linux Distros Unpatched Vulnerability : CVE-2026-91765
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cleanupxmlnode in the SOAP XML parser recurses once per XML nesting level with no depth limit. An unauthenticated attacker can post a SOAP request containing te...
CVE-2026-93352 Laravel-Mediable 7.0.0 < 7.0.2 RCE via .pht File Upload
Laravel-Mediable 7.0.0 before 7.0.2 contains an incomplete patch for CVE-2026-49972 in which the .pht extension is absent from the forbiddenextensions blocklist in config/mediable.php. The blocklist introduced to address CVE-2026-49972 includes phpt but omits pht, which Apache executes as PHP via...
CVE-2026-93352
Laravel-Mediable versions 7.0.0 before 7.0.2 are vulnerable to remote code execution due to an incomplete patch for CVE-2026-49972. The forbidden_extensions blocklist in config/mediable.php includes phpt but omits .pht. On Debian and Ubuntu systems, Apache may execute .pht files as PHP via the de...
[SECURITY] [DLA 4792-1] tzdata new timezone database
------------------------------------------------------------------------- Debian LTS Advisory DLA-4792-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort September 23, 2026 https://wiki.debian.org/LTS -...
DEBIAN-CVE-2026-78253
Uncontrolled recursion in QXmlStreamReader::readElementText in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted XML document...