PT-2026-85110

Unauthenticated Cross Site Scripting XSS in EWWW Image Optimizer = 8.7.6 versions...

PT-2026-85092

Unauthenticated Cross Site Scripting XSS in WP QuickLaTeX = 3.8.8 versions...

PT-2026-84924

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its parent to harden against bugs elsewhere in KVM, as violating KVM's...

PT-2026-86379

CVE ID :CVE-2026-66048 Published : Sept. 2, 2026, 9:05 p.m. | 3 hours, 8 minutes ago Description :None Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

wget security, bug fix, and enhancement update

1.19.5-16.0.1 - SSLv3 support dropped from openssl, v3 test certificates need to be replaced Orabug: 29613455 1.19.5-16 - Resolves: RHEL-145875 - async unsafe code in signal handler context 1.19.5-15 - Fix CVE-2026-58469: buffer underflow in cleanmetalinkstring - Resolves: RHEL-212496 1.19.5-14 -...

RockyLinux 10 : go-fdo-client (RLSA-2026:62577)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:62577 advisory. crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application CVE-2026-33810 encoding/asn1: golang: Go...

MiracleLinux 8 : libssh-0.9.6-17.el8_10 (AXSA:2026-1742:02)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1742:02 advisory. libssh: libssh: denial of service via zero advertised channel packet size CVE-2026-59843 libssh: libssh: denial of service via oversized SFTP read...

RockyLinux 10 : golang-github-openprinting-ipp-usb (RLSA-2026:62631)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:62631 advisory. mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header CVE-2026-42504 encoding/asn1: golang: Go encoding/asn1: Denial of...

TencentOS Server 2: dracut (TSSA-2026:0970)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0970 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2026-84368

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - joi is a schema description language and data validator for JavaScript. From 16.0.0 until 17.13.6 and 18.2.5, the @hapi/joi package through 17.1.1 and the...

AlmaLinux 10 : golang-github-openprinting-ipp-usb (ALSA-2026:62631)

The remote AlmaLinux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2026:62631 advisory. mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header CVE-2026-42504 encoding/asn1: golang: Go encoding/asn1: Denial of Servi...

The vulnerability of the sock_recv_cmsgs() function in the include/net/sock.h module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the sockrecvcmsgs function in the include/net/sock.h module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mpi3mr_probe() function in the drivers/scsi/mpi3mr/mpi3mr_os.c file of the Linux operating system’s SCSI device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the mpi3mrprobe function in the drivers/scsi/mpi3mr/mpi3mros.c file of the Linux SCSI device driver module is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...

The vulnerability in the `fbcon_rotate_font()` function of the `drivers/video/fbdev/core/fbcon_rotate.c` driver for Linux kernel-based graphics buffer devices allows a attacker to disclose sensitive information or cause system failures.

The vulnerability of the fbconrotatefont function in the drivers/video/fbdev/core/fbconrotate.c driver for Linux kernel-based graphics buffer devices is related to the execution of operations beyond the buffer’s memory boundaries. Exploiting this vulnerability can allow an attacker to disclose...

The vulnerability of the iscsit_close_session() function in the drivers/target/iscsi/iscsi_target.c file of the Linux kernel’s TCM driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the iscsitclosesession function in the drivers/target/iscsi/iscsitarget.c file of the Linux kernel’s TCM driver is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the __ftrace_event_enable_disable() function in the kernel/trace/traceevents.c module, which supports Linux operating system kernel tracing, allows a attacker to cause a service failure.

The vulnerability of the ftraceeventenabledisable function in the kernel/trace/traceevents.c module, which supports Linux operating system’s kernel tracing, is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service...

The vulnerability of the bfqq_request_over_limit() function in the block/bfq-iosched.c module exposes the block-level support for the Linux operating system, allowing a hacker to cause a service failure.

The vulnerability of the bfqqrequestoverlimit function in the block/bfq-iosched.c module related to Linux’s block-level kernel support involves errors related to division by zero. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the bareudp_fillmetadata dst() function in the drivers/net/bareudp.c module of the Linux kernel network device driver allows a attacker to cause a service failure.

The vulnerability of the bareudpfillmetadatadst function in the drivers/net/bareudp.c module of the Linux kernel network device driver is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the nested_sync_control_from_vmcb02() function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the x86 kernel of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the nestedsynccontrolfromvmcb02 function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability can allow ...

The vulnerability of the ctrlcmd_bye() function in the net/qrtr/ns.c module allows a hacker to trigger a service failure for Qualcomm IPC kernel-based Linux operating systems.

The vulnerability of the ctrlcmdbye function in the net/qrtr/ns.c module, which supports Qualcomm IPC cores in the Linux operating system, relates to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability could allow an attacker to cause a service...