1641 matches found
ALSA-2026:1429 Important: php:8.3 security update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: heap-based buffer overflow in arraymerge CVE-2025-14178 php: PHP: Information disclosure via getimagesize function when reading multi-chunk images CVE-2025-14177 php: PHP: Denial of Service...
ALSA-2026:1409 Important: php:8.2 security update
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: pgsql extension does not check for errors during escaping CVE-2025-1735 php: NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 php: PHP Hostname Nul...
CVE-2026-0793
ALGO 8180 IP Audio Alerter InformaCast Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required to exploit this vulnerability...
CVE-2026-0793
ALGO 8180 IP Audio Alerter InformaCast Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of ALGO 8180 IP Audio Alerter devices. Authentication is not required to exploit this vulnerability...
MiracleLinux 9 : galera-26.4.11-1.el9, mariadb-10.5.16-2.el9, mysql-selinux-1.0.5-1.el9 (AXSA:2022-4045:01)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2022-4045:01 advisory. mariadb: MariaDB through 10.5.9 allows attackers to trigger a convertconsttoint use-after-free when the BIGINT data type is used CVE-2021-46669...
MiracleLinux 4 : xorg-x11-server-1.17.4-18.0.2.AXS4 (AXSA:2021-1136:01)
The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-1136:01 advisory. xorg-x11-server: Out-of-bounds access in XkbSetMap function CVE-2020-14360 xorg-x11-server: XkbSetDeviceInfo heap-based buffer overflow privilege...
MiracleLinux 8 : tigervnc-1.13.1-14.el8_10 (AXSA:2024-9015:15)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9015:15 advisory. xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability CVE-2024-9632 Tenable has extracted the preceding description block...
MiracleLinux 8 : libssh-0.9.6-3.el8 (AXSA:2022-3399:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3399:01 advisory. libssh: possible heap-based buffer overflow when rekeying CVE-2021-3634 Tenable has extracted the preceding description block directly from the MiracleLinux...
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow in the GenImageFontAtlas function. An attacker can execute arbitrary code or cause a denial of service by providing specially crafted input that triggers a heap-based buffer overflow during local execution...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003624)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003624 advisory. There is heap-based buffer overflow in kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001523)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001523 advisory. Linux kernel is vulnerable to a heap-based buffer overflow in the fs/ext4/xattr.c:ext4xattrsetentry function. An attacker could exploit this by operating on a mounte...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003751)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003751 advisory. A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacker could cause a denial ...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003014)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003014 advisory. Linux kernel is vulnerable to a heap-based buffer overflow in the fs/ext4/xattr.c:ext4xattrsetentry function. An attacker could exploit this by operating on a mounte...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002663)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002663 advisory. The tipcmsgbuild function in net/tipc/msg.c in the Linux kernel through 4.8.11 does not validate the relationship between the minimum fragment length and the maximum...
CVE-2026-20837
Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally...
CVE-2026-20940
Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
MiracleLinux 3 : rdesktop-1.4.1-4.2AXS3 (AXSA:2008-87:01)
The remote MiracleLinux 3 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2008-87:01 advisory. rdesktop is an open source client for Microsoft Windows NT Terminal Server and Microsoft Windows 2000 and 2003 Terminal Services, capable of natively...
Adobe InDesign < 20.5.1 / 21.0 < 21.1.0 Multiple Vulnerabilities (APSB26-02)
The version of Adobe InDesign installed on the remote Windows host is prior to 20.5.1, 21.1.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-02 advisory. - InDesign Desktop versions 21.0, 19.5.5 and earlier are affected by a Heap-based Buffer Overflow...
CVE-2026-21277
Summary: CVE-2026-21277 affects Adobe InDesign Desktop (versions 21.0, 19.5.5 and earlier). A heap-based buffer overflow could allow arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a specially crafted file. Multiple sources...
