24934 matches found
PT-2026-65222
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the net1080 rx fixup function where the packet len is not properly validated before accessing a pad byte. When packet len is even, the function reads from skb-datapack...
PT-2026-65226
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SCTP implementation where the sctp sf do 5 2 6 stale function fails to properly validate the length of a STALE COOKIE cause within an ERROR chunk when received in...
CVE-2026-17574: Reachable Assertion
HDF5 contains a NULL pointer dereference vulnerability. Processing a crafted HDF5 file containing an attribute with an invalid variable-length datatype type field may cause the application to crash when the attribute is read...
PT-2026-65227
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the virtio-net component where the receive big function uses an overly loose bound for the device-announced length. Specifically, the check allows for a length slightl...
PT-2026-65221
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A heap out-of-bounds read exists in the drm parse tiled block function. The function casts a DisplayID block to a struct displayid tiled block and reads the layout up to tile-topology id...
PT-2026-64977
Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A NULL pointer dereference occurs when processing a specially crafted HDF5 file. The issue is triggered when the application reads an attribute containing an invalid variable-length datatype typ...
RockyLinux 8 : kernel-rt (RLSA-2026:45116)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:45116 advisory. kernel: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O CVE-2025-40026 kernel: xfrm single-frag length not properly limited kernel: ...
Siemens SIMATIC S7-1500 CPU 1518 MFP Improper Handling of Length Parameter Inconsistency (CVE-2026-23397)
This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505801; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...
Linux Distros Unpatched Vulnerability : CVE-2026-64527
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/hyperv: validate VMBus packet size in receive callback hypervreceivesub reads msg-vidhdr.type and dispatches into one of four message-type branches without...
RockyLinux 8 : kernel (RLSA-2026:45115)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:45115 advisory. kernel: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O CVE-2025-40026 kernel: xfrm single-frag length not properly limited kernel: ...
Siemens SIMATIC S7-1500 CPU 1518 MFP Buffer Access with Incorrect Length Value (CVE-2026-31752)
This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505771; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...
Linux Distros Unpatched Vulnerability : CVE-2026-64550
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: qualcomm: rmnet: validate MAP frame length before ingress parsing When ingress deaggregation is disabled, rmnetmapingresshandler passes the skb straight to...
Siemens SIMATIC S7-1500 CPU 1518 MFP Buffer Access with Incorrect Length Value (CVE-2026-23474)
This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505597; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...
Linux Distros Unpatched Vulnerability : CVE-2026-64533
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: validate lcnsfollow in logreplay conversion logreplay converts DIRPAGEENTRY32 records into DIRPAGEENTRY records when replaying version 0 restart...
CVE-2026-64219
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate payload length and linkindex in dcprocessdmubauxtransferasync Why&How dcprocessdmubauxtransferasync copies payload-length bytes into a 16-byte stack buffer dpaux.data16 guarded only by an ASSERT, which i...
CVE-2026-64208
In the Linux kernel, the following vulnerability has been resolved: crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks Change the krb5 crypto library to provide facilities to precheck the length of the message about to be decrypted or verified. Fix AFRXRPC to make use of this to...
Remote Denial of Service via malformed NIP-04 IV
The nostr crate did not validate the length of the initialization vector decoded from the ?iv= portion of a NIP-04 encrypted message. The decoded IV was converted from a byte slice to the 16-byte AES-CBC IV type using a conversion that asserts the slice length. As a result, an IV whose decoded...
udf: validate sparing table length as an entry count, not a byte count
...