395585 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-98224
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/vma: correctly unaccount on mmapprepare failure mmapsetup accounts memory for relevant mappings via: securityvmenoughmemorymm - vmenoughmemory - vmacctmemory...
PT-2026-108167
Name of the Vulnerable Software and Affected Versions MongoDB PHP Driver affected versions not specified Description The BSON encoder converts a string length to a 32-bit value without proper validation. If an application encodes a string close to 4 GiB, the allocation size may wrap around while...
EulerOS 2.0 SP15 : libarchive (EulerOS-SA-2026-3918)
According to the versions of the libarchive packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archivewritezipheader function in...
PT-2026-108283
🚨 CVE-2026-105673 An unauthenticated denial-of-service vulnerability exists in Tapo C325WB v2 in the RTSP streaming service on TCP port 554 when the Camera Account feature is enabled. A crafted pair of RTSP-over-HTTP tunneling requests can cause memory corruption and crash the streaming daemon. ...
ROS-20261008-73-0332
The vulnerability in the kernel-lt is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261008-73-0130
The vulnerability in the kernel-lt is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
EulerOS 2.0 SP15 : libssh2 (EulerOS-SA-2026-3987)
According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation...
CVE-2026-107705: Stack-based Buffer Overflow
Poppler 0.42.0 through 26.10.0 contains a stack-based buffer overflow in Decrypt::revision6Hash that allows attackers controlling the password to overwrite stack memory when opening AESV3/R6 encrypted PDFs. Attackers can supply a password longer than 127 bytes through applications using the...
PT-2026-108195
Name of the Vulnerable Software and Affected Versions Poppler versions 0.42.0 through 26.10.0 Description A stack-based buffer overflow exists in the Decrypt::revision6Hash function. This occurs when opening PDFs encrypted with AESV3/R6 if a password longer than 127 bytes is provided. Attackers c...
PT-2026-108037
FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in av dynamic hdr plus to t35 that leaves up to three payload bytes uninitialized when tone mapping flag is 0. Attackers can supply crafted Matroska T.35 BlockAdditional or HEVC/AV1 SEI metadata so that remuxing or...
Oracle Linux 9 : bind (ELSA-2026-75767)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-75767 advisory. - Prevent assertion failure in dns64 mode with break-dnssec yes CVE-2026-19666 - Prevent crash on wildcard responses containing both NSEC and NSEC3...
ROS-20261008-73-0314
The vulnerability in the kernel-lt is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...
EulerOS 2.0 SP15 : containerd (EulerOS-SA-2026-3968)
According to the versions of the containerd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a...
CVE-2026-107676: Use of Uninitialized Resource
FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in avdynamichdrplustot35 that leaves up to three payload bytes uninitialized when tonemappingflag is 0. Attackers can supply crafted Matroska T.35 BlockAdditional or HEVC/AV1 SEI metadata so that remuxing or transcodin...
EulerOS 2.0 SP15 : libsoup (EulerOS-SA-2026-3986)
According to the versions of the libsoup packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soupmessageheadersappendcommon function in...
EulerOS 2.0 SP15 : python-pillow (EulerOS-SA-2026-3943)
According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. From 5.2.0 until 12.3.0, Pillow's TGA RLE encoder reads past its packed row buffer when saving a mode 1...
EulerOS 2.0 SP15 : containerd (EulerOS-SA-2026-3902)
According to the versions of the containerd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2, contain a vulnerability that allows a...
CVE-2026-61801: Uncontrolled Resource Consumption
The github.com/moby/sys/user package provides Go utilities for parsing and looking up entries in Unix-style user and group database files. Versions before 0.4.1 do not sufficiently limit entries when parsing /etc/passwd- or /etc/group-style files, allowing an attacker who can supply a specially...
EulerOS 2.0 SP15 : mod_http2 (EulerOS-SA-2026-3926)
According to the versions of the modhttp2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's modhttp leads to denial of service via malicious HTTP...
PT-2026-108316
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Parsing a multipart form can bypass memory limits, allowing an arbitrarily long line to be read into memory. This occurs when the remaining limit at the start of...