333399 matches found
PT-2026-71607
Name of the Vulnerable Software and Affected Versions OpenSSL versions 3.5 and later Description An OpenSSL QUIC server can allocate and queue new incoming channels without enforcing a limit when processing valid QUIC Initial packets for unknown destination connection IDs. The system uses the...
The vulnerability of the slaves/w1_therm.c component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the slaves/w1therm.c component in the Linux operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
Vulnerability in core server (CVE-2026-14668)
PostgreSQL ctid type confusion in selectivity estimator discloses derivative of arbitrary read Type confusion regarding input of PostgreSQL ctid data type selectivity estimator allows an object creator to view a calculation derived from the value of an arbitrary 4-byte span of memory, via a chose...
PT-2026-71630
Name of the Vulnerable Software and Affected Versions rsync versions prior to 3.5.0 Description An out-of-bounds read exists in the sender-side block matching logic. A malicious receiver can trigger memory access before the start of an allocated buffer by sending a crafted checksum block with a...
Important: bind security update
The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...
ALSA-2026:54654 Important: bind security update
The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...
PT-2026-71898
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Resolving relative paths containing parent directory '..' segments previously performed string conversions and buffer rewrites at each step. This process resulte...
ALSA-2026:54510 Important: bind security update
The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. Security Fixes:...
UBUNTU-CVE-2026-73150
GHSA-4f8x-49pf-3x5v: Buffer overflow in APRS message construction...
PT-2026-71466
Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description Type confusion in the PostgreSQL ctid data type selectivi...
SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:3593-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3593-1 advisory. The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues: The following security issues were fixed: -...
SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2026:3595-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3595-1 advisory. The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: -...
RHEL 8 : bind (RHSA-2026:54654)
"The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:54654 advisory. The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named...
Linux Distros Unpatched Vulnerability : CVE-2026-14668
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type confusion regarding input of PostgreSQL ctid data type selectivity estimator allows an object creator to view a calculation derived from the value of an...
FFmpeg 0.5 < 9.0 Multiple Vulnerabilities
The version of FFmpeg installed on the remote host is 0.5 or later but prior to 9.0. It is, therefore, affected by multiple vulnerabilities: - A signed integer overflow vulnerability in the DVB subtitle parser in libavcodec/dvbsubparser.c allows attackers to trigger a heap buffer overflow by...
CVE-2026-68453
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix buffer over-read in ccacipher2protkey Add validation of both the actual key buffer size and token length fields in all the ccachecksectoken functions. Additionally check in ccagencipherkey for possible underflow...
CVE-2026-52048
MQTT v5 properties bounds check uses relative offset against absolute position...
PT-2026-71657
Name of the Vulnerable Software and Affected Versions rsync versions 3.2.3 through 3.4.x Description An out-of-bounds write exists in the parse size arg function. The issue occurs because the return value of snprintf is used as an index for a .bss-segment array without proper bounds checking. Whe...
PT-2026-71658
Name of the Vulnerable Software and Affected Versions rsync versions 3.0.0 through 3.4.x Description An out-of-bounds write occurs when triggering HLINK BUMP processing on file entries that have the FLAG HLINKED flag set while the hard-link preservation option is inactive. This happens because th...