76105 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-59156
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, a...
EulerOS Virtualization 2.10.0 : krb5 (EulerOS-SA-2026-3870)
According to the versions of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In MIT Kerberos 5 aka krb5 before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls...
RHEL 9 : rust (RHSA-2026:69097)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:69097 advisory. Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety. This package includes the Rust...
EulerOS Virtualization 2.10.0 : bind (EulerOS-SA-2026-3861)
According to the versions of the bind packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : BIND servers that are configured to use TKEY-based authentication via GSS-API tokens are vulnerable to excessive memory consumption...
Cisco IOS XR Software Security Hardening Release: September 2026 (cisco-sa-hardening-iosxr-qg64NcM)
According to its self-reported version, Cisco IOS XR is affected by multiple vulnerabilities. - Multiple vulnerabilities in Cisco IOS XR Software due to improper resource control issues could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service conditio...
SUSE SLES15: aws-nitro-enclaves-binaryblobs-upstream / aws-nitro-enclaves-cli / etc (SUSE-SU-2026:3992-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3992-1 advisory. - CVE-2026-25541: bytes: integer overflow in 'BytesMut:reserve' can lead to undefined behavior and crashes bsc1274300. -...
CVE-2026-88407
An out-of-bounds read in the nodetokencount/relationtokencount component of FalkorDB Redis module v4.20.1 to v4.20.4 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-88411
CVE-2026-88411 is an improper error handling vulnerability in the GRAPH.EFFECT component (/effects/effects_apply.c) of FalkorDB (a Redis module) v4.20.1 , leading to a Denial of Service within the application. The CVSS 3.1 score is 7.5 (HIGH) , with a network attack vector requiring no privileges...
CVE-2026-88408
FalkorDB (a Redis graph database module) versions v4.20.1 through v4.20.4 are affected by a stack overflow in the _GetGroup() function within /ops/op_aggregate.c. An authenticated, remote attacker can trigger a Denial of Service by sending a crafted input to the affected function. The NVD-assesse...
CVE-2026-73549: Improper Check for Unusual or Exceptional Conditions
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's Utility::copyInternetAddressAndPort and QUIC client-address paths reconstruct scoped IPv6 addresses through addressAsString and Ipv6Instance. The string...
CVE-2026-88409
FalkorDB (a Redis module) versions v4.20.1 through v4.20.4 contains a buffer overflow in the _Decode_GrB_Matrix function located in /v19/decode_matrix.c. An attacker with low privileges can trigger a Denial of Service by sending a crafted input over the network. The assigned CVSS 3.1 score is 8.8...
CVE-2026-88411: Uncaught Exception
Improper error handling in the GRAPH.EFFECT component /effects/effectsapply.c of FalkorDB Redis module v4.20.1 leads to a Denial of Service DoS within the application...
CVE-2026-91865: Allocation of Resources Without Limits or Throttling
A small WS-Policy document using repeated policy references can force Neethi to re-expand the same references exponentially during normalization, consuming huge amounts of CPU and memory denial of service. Users are recommended to upgrade to version 3.2.4, which fixes this issue...
CVE-2026-48521: NULL Pointer Dereference
Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1, Envoy's ProdClusterManagerFactory::allocateConnPool dereferences transportsocketoptions while selecting an HTTP/3 connection pool without first checking whether the...
The vulnerability of the glyph_cache_get() function in the libfreerdp/cache/glyph.c file of the RDP client FreeRDP allows a attacker to disclose sensitive information or cause service failure.
The vulnerability of the glyphcacheget function in the libfreerdp/cache/glyph.c file of the RDP client FreeRDP relates to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information or cause service...
The vulnerability of the lpc32xx_pwm_probe() function in the drivers/pwm/pwm-lpc32xx.c file of the PWM device driver for Linux operating systems allows a attacker to cause a system failure.
The vulnerability of the lpc32xxpwmprobe function in the drivers/pwm/pwm-lpc32xx.c file of the PWM device driver for Linux operating systems is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the Classify::ReadIntTemplates() function in the src/classify/intproto.cpp file of the Tesseract OCR system allows a hacker to induce a service failure.
The vulnerability of the GenericVector::read function in the src/ccutil/genericvector.h file of the Tesseract OCR system is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...
ALSA-2026:69541 Important: rsyslog security update
The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format. Security Fixes: rsyslog: rsyslog: Denial of service via heap buffer overflow in...
CVE-2026-58270: Inefficient Regular Expression Complexity
Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.4.0, the sync diff endpoint compiles a user-supplied string into a RegExp with no complexity validation. A catastrophic-backtracking pattern e.g. ^a++b blocks the Node.js event loop...
