Medium: vsftpd

Issue Overview: A flaw was found in vsftpd. This vulnerability allows a denial of service DoS via an integer overflow in the ls command parameter parsing, triggered by a remote, authenticated attacker sending a crafted STAT command with a specific byte sequence. CVE-2025-14242 Affected Packages:...

PT-2026-23629

TinyWeb is a web server HTTP, HTTPS written in Delphi for Win32. Prior to version 2.03, an integer overflow vulnerability in the string-to-integer conversion routine Val allows an unauthenticated remote attacker to bypass Content-Length restrictions and perform HTTP Request Smuggling. This can le...

Vulnerability of the qat_dh_compute_value() function in the drivers/crypto/qat/qat_common/qat_asym_algs.c module – a driver for the Linux kernel’s cryptographic accelerator, allowing a hacker to cause a service failure.

Vulnerability of the qatdhcomputevalue function in the drivers/crypto/qat/qatcommon/qatasymalgs.c module – The driver for the Linux kernel’s cryptographic accelerator is vulnerable to integer overflow or cyclic shift attacks. Exploiting this vulnerability could allow an attacker to cause a system...

SUSE SLES15 Security Update : glibc-livepatches (SUSE-SU-2026:0827-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:0827-1 advisory. - CVE-2026-0861: Fixed inadequate size check in the memalign suite may result in an integer overflow bsc1256913 Tenable has extracted the preceding...

SUSE SLES12 Security Update : mozilla-nss (SUSE-SU-2026:0814-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:0814-1 advisory. Update to NSS 3.112.3: CVE-2026-2781: Avoid integer overflow in platform-independent ghash bsc1258568 Tenable has extracted the preceding description...

Google Android elevation of privilege vulnerability (CNVD-2026-19056)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability caused by an out-of-bounds write due to an integer overflow in multiple functions of memprotect.c. The vulnerability is caused by an integer overflow in th...

Medium: gimp

Issue Overview: GIMP: PSD loader: heap-buffer-overflow in freadpascalstring no null terminator CVE-2026-2239 An integer overflow vulnerability has been identified in the PSP Paint Shop Pro file parser of GIMP. The issue occurs in the readcreatorblock function, where the Creator metadata block is...

openSUSE 16 Security Update : expat (openSUSE-SU-2026:20306-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20306-1 advisory. - CVE-2026-24515: failure to copy the encoding handler data passed to XMLSetUnknownEncodingHandler may cause a NULL dereference bsc1257144. -...

NewStart CGSL MAIN 6.06 (SP) : e2fsprogs Multiple Vulnerabilities (NS-SA-2026-0025)

The remote NewStart CGSL host, running version MAIN 6.06 SP, has e2fsprogs packages installed that are affected by multiple vulnerabilities: - Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by causing a...

The vulnerability of the ip6_find_1stfragopt() function in the include/net/ipv6.h module of the Linux kernel allows a hacker to induce a service failure.

The vulnerability of the ip6find1stfragopt function in the include/net/ipv6.h module of the Linux kernel is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability can allow an attacker to cause a service failure...

openSUSE 15: expat / libexpat-devel / libexpat-devel-32bit / libexpat1 / etc (SUSE-SU-2026:0826-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0826-1 advisory. - CVE-2026-24515: Fixed a null dereference in XMLExternalEntityParserCreate. bsc1257144 - CVE-2026-25210: Fixed an integer overflow in doContent...

Security update for glibc-livepatches

This update for glibc-livepatches fixes the following issues: CVE-2026-0861: Fixed inadequate size check in the memalign suite may result in an integer overflow bsc1256913 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypp...

SUSE-SU-2026:0827-1 Security update for glibc-livepatches

This update for glibc-livepatches fixes the following issues: - CVE-2026-0861: Fixed inadequate size check in the memalign suite may result in an integer overflow bsc1256913...

Security update for expat

This update for expat fixes the following issues: CVE-2026-24515: Fixed a null dereference in XMLExternalEntityParserCreate. bsc1257144 CVE-2026-25210: Fixed an integer overflow in doContent. bsc1257496 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods...

SUSE-SU-2026:0826-1 Security update for expat

This update for expat fixes the following issues: - CVE-2026-24515: Fixed a null dereference in XMLExternalEntityParserCreate. bsc1257144 - CVE-2026-25210: Fixed an integer overflow in doContent. bsc1257496...

Exploit for Integer Overflow or Wraparound in Linux Linux_Kernel

No d...

Exploit for Integer Overflow or Wraparound in Linux Linux_Kernel

POC for...

CISA Adds Five Known Exploited Vulnerabilities to Catalog

CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2017-7921link is external Hikvision Multiple Products Improper Authentication Vulnerability CVE-2021-22681link is external Rockwell Multiple Products...

SUSE-SU-2026:0814-1 Security update for mozilla-nss

This update for mozilla-nss fixes the following issues: Update to NSS 3.112.3: CVE-2026-2781: Avoid integer overflow in platform-independent ghash bsc1258568...

SUSE-SU-2026:0813-1 Security update for mozilla-nss

This update for mozilla-nss fixes the following issues: Update to NSS 3.112.3: CVE-2026-2781: Avoid integer overflow in platform-independent ghash bsc1258568...