PT-2026-81495

Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.3.0 through 3.3.12 OpenEXR versions 3.4.0 through 3.4.13 Description The PyOpenEXR Python bindings contain a heap out-of-bounds write that occurs when reading a specially crafted deep scanline EXR file. The issue arises when...

CVE-2026-54874

Excessive Memory Use Buffering DTLS Records for a Future Epoch...

Linux Distros Unpatched Vulnerability : CVE-2026-55373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12...

JetBrains TeamCity < 2021.2.1 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2021.2.1. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2021.2.1, a redirection to an external site was possible. CVE-2022-24330 - In JetBrains TeamCity before 2021.2.1, the Agent...

The vulnerability of the fib6_nh_init() function in the net/ipv6/route.c module of the IPv6 protocol implementation in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the fib6nhinit function in the net/ipv6/route.c module of the Linux operating system’s IPv6 kernel implementation is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the function ieee80211_radiotap_iterator_next() in the net/wireless/radiotap.c module, which is part of Linux’s wireless communication support, allows a malicious actor to cause a service failure.

The vulnerability of the function ieee80211radiotapiteratornext in the net/wireless/radiotap.c module, which is part of Linux’s wireless communication support, is related to the dependence on unspecified behavior for each implementation type. Exploiting this vulnerability could allow an attacker ...

The vulnerability of the ice_devlink_reinit_down() function in the drivers/net/ethernet/intel/ice/devlink/devlink.c file of the Intel Ethernet network adapter driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the icedevlinkreinitdown function in the drivers/net/ethernet/intel/ice/devlink/devlink.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the assignment of the pointer L. Exploiting this vulnerability could allow an attacker to...

The vulnerability of the netfs_retry_read_subrequests() function in the fs/netfs/read_retry.c file of the Netfs file system in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the netfsretryreadsubrequests function in the fs/netfs/readretry.c file of the Netfs file system in the Linux operating system is related to the repeated use of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

The vulnerability of the function ieee80211_determine_chan_mode() in the module net/mac80211/mlme.c of the mac80211 stack implementation in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the function ieee80211determinechanmode in the module net/mac80211/mlme.c of the Linux kernel’s mac80211 stack is related to the return of incorrect code states. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ets_offload_change() function in the net/sched/sch_ets.c module of the net/sched subsystem of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the etsoffloadchange function in the net/sched/schets.c module of the net/sched subsystem of the Linux operating system is related to zero-division errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the qlt_free_session_done() function in the drivers/scsi/qla2xxx/qla_target.c driver for Linux SCSI device drivers allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the qltfreesessiondone function in the drivers/scsi/qla2xxx/qlatarget.c driver for Linux SCSI device drivers is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected...

PT-2026-81851

An algorithmic complexity flaw exists in libsoup's HTTP Range header processing that persists after the CVE-2025-32907 fix. CVE-2025-32907 addressed memory amplification when a client repeated the same range many times in a single Range header. Commit 9bb92f7a corrected merge correctness in soup...

Linux Distros Unpatched Vulnerability : CVE-2026-76098

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mistune is a Python Markdown parser with renderers and plugins. Versions 3.3.0 through 3.3.2 are vulnerable to DoS through deeply nested tokens. HTML rendering...

PT-2026-81118

Name of the Vulnerable Software and Affected Versions OpenEXR versions 3.1.0 through 3.2.10 OpenEXR versions 3.3.0 through 3.3.12 OpenEXR versions 3.4.0 through 3.4.13 Description An integer overflow occurs during an int32 t multiplication within the unpack sample table function of OpenEXRCore wh...

PT-2026-81903

LeafWiki extracts an uploaded ZIP archive without limiting how much data it will write. ZipExtractor.ExtractToDir in internal/importer/zip extractor.go opens each entry and copies it to the destination with io.Copy, which runs to the end of the decompressed stream, so only the size of the uploade...

CVE-2026-18798

QUIC Server May Trigger Double Free When Processing INITIAL Packet...

The vulnerability of the rxrpc_input_packet_on_conn() function in the net/rxrpc/io_thread.c module, which is part of the RxRPC session support for Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the rxrpcinputpacketonconn function in the net/rxrpc/iothread.c module, which supports RxRPC session sockets in Linux kernels, is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the cdc_ncm_check_tx_max() function in the drivers/net/usb/cdc_ncm.c module of the Linux kernel’s USB network adapter driver allows a hacker to cause a service failure.

The vulnerability of the cdcncmchecktxmax function in the drivers/net/usb/cdcncm.c module of the Linux network adapter driver framework is related to a violation of the data format agreement. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the sev_mem_enc_register_region() function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the sevmemencregisterregion function in the arch/x86/kvm/svm/sev.c module of the virtualization subsystem on the x86 kernel of the Linux operating system is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability in the function `drcm_client_modeset_probe()` of the `drivers/gpu/drm/drm_client_modeset.c` file, a part of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system’s kernel, allows a hacker to cause a service failure.

The vulnerability of the drmclientmodesetprobe function in the drivers/gpu/drm/drmclientmodeset.c file of the Direct Rendering Infrastructure DRI driver module of the Linux operating system is related to pointer aliasing. Exploiting this vulnerability could allow an attacker to cause a service...