ROS-20260922-73-0136

The vulnerability in the Systemd service initialization and management subsystem is related to insecure handling of privileges. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260922-73-0080

The vulnerability in Tomcat11 is related to a single shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260922-73-0123

The vulnerability of the WINS-server software Samba is related to pointer aliasing. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

ROS-20260922-73-0013

A vulnerability in the WAV parser of the GStreamer multimedia framework allows for integer overflow when processing improperly formatted WAV files. This vulnerability enables a malicious actor to cause the application to terminate abnormally service failure...

ROS-20260922-73-0008

The vulnerability in gstreamer1-plugins-bad-free is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260922-73-0102

The vulnerability of the 389-ds-base package for Debian GNU/Linux and Red Hat Enterprise Linux exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures when changing the userPassword parameter using improperly...

ROS-20260922-73-0079

The vulnerability in Tomcat10 is related to a single-shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260922-73-0085

The vulnerability in Tomcat10 is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

ROS-20260922-73-0078

The vulnerability in Tomcat is related to a single shift error. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260922-73-0084

The vulnerability in Tomcat is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

ROS-20260922-73-0107

The vulnerability in the 389-ds-base relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-97027

A reachable assertion vulnerability exists in YARA 4.5.8 when loading crafted .yrc compiled rule files. An attacker can provide a malicious file with an invalid arena configuration num buffers=0 that triggers an assertion failure in yr arena get ptr, causing the application to terminate...

ROS-20260922-73-0005

The vulnerability in gstreamer1-plugins-good is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260922-73-0027

The vulnerability in gstreamer1-plugins-bad-free is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260922-73-0031

The vulnerability in gstreamer1-plugins-ugly is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260922-73-0015

A vulnerability exists in the implementation of the audio/video processing protocol in the gst-libav library of the GStreamer multimedia framework. This vulnerability relates to the pointer release mechanism, which allows a malicious actor to cause an unexpected termination of the application a...

ROS-20260922-73-0029

The vulnerability in gstreamer1-plugins-ugly is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260922-73-0025

The vulnerability in gstreamer1-plugins-good is related to the lack of checks for division by zero. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260922-73-0017

The vulnerability in gstreamer1-plugins-good is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-88341

A reachable assertion vulnerability exists in YARA 4.5.8 when loading crafted .yrc compiled rule files. An attacker can provide a malicious file with an invalid arena configuration numbuffers=0 that triggers an assertion failure in yrarenagetptr, causing the application to terminate...