54273 matches found
gstreamer: gstreamer: DTLS certificate Subject DN stack buffer overflow in openssl_verify_callback
A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the peer certificate Subject Distinguished Name is printed into a fixed-size 2048-byte stack buffer without bounds checking. A remote unauthenticated attacker can send a certificate with an...
kernel: scsi: core: Wake up the error handler when final completions race against each other
Race condition vulnerabilities were found in the Linux kernel's SCSI error handler wake-up logic. Memory ordering issues in scsidechostbusy and ordering problems in scsiehinchostfailed can cause the SCSI error handler to never wake up when command completions race against each other. This leaves...
perl-Date-Manip security update
6.94-5.1 - Fix CVE-2026-60075: prevent quadratic-cost regex DoS in date/time parsing by rejecting overly long input strings Resolves: RHEL-239790...
UBUNTU-CVE-2026-75032
A flaw was found in BlueZ. Insufficient validation of packet length fi...
PT-2026-78858
Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 Description A NULL pointer dereference in the Bluetooth BR/EDR FHS protocol dissector can lead to a crash, resulting in a denial of service. Recommendations Update...
CVE-2026-23930
An unauthenticated user is able to cause disproportionate CPU load on...
PT-2026-78853
Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 Description A heap-based buffer overflow in the Bluetooth AVRCP Profile protocol dissector can lead to a crash, resulting in a denial of service. Recommendations...
Microsoft Visual Studio Products (August 2026)
The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally. CVE-2026-62871 - Unchecked input for loop condition in .NET allows an unauthorized...
UBUNTU-CVE-2026-17084
The "stringprep" module didnt process characters from RFC 3454 tables...
UBUNTU-CVE-2026-63639
Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8...
UBUNTU-CVE-2026-73502
kin-openapi is a Go project for handling OpenAPI files. From 0.2.0 unt...
ROS-20260819-73-0051
The vulnerability in Tomcat10 is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
PT-2026-78859
Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 Description A crash in the Bluetooth HFP Profile protocol dissector allows for a denial of service. This is caused by an out-of-bounds read, which occurs when the...
PT-2026-78848
Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 Description A heap-based buffer overflow in the dissection engine can lead to a crash, resulting in a denial of service. A heap-based buffer overflow occurs when a...
Fedora 44 : python3.12 (2026-a9f0296a41)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a9f0296a41 advisory. A security update of the Python interpreter. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...
PT-2026-78718
Name of the Vulnerable Software and Affected Versions Netty versions prior to 4.1.137.Final Netty versions prior to 4.2.17.Final Description An unauthenticated remote peer can cause quadratic CPU work on the event loop by advertising a large ClientHello and delivering its body in thousands of tin...
ROS-20260819-73-0057
The vulnerability in Tomcat10 is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Linux Distros Unpatched Vulnerability : CVE-2026-63409
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Deskflow is a keyboard and mouse sharing app. From 1.17.0 until continuous build 1.26.0.296, a malicious Deskflow server can send an odd-length DSOP vector to...