Atlassian Confluence 9.1.x < 9.2.26 / 9.3.x < 10.2.19 / 11.0.0 (CONFSERVER-104515)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104515 advisory. - The CBOR parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints.validateNameLength when decoding JSON object property...

Mozilla Thunderbird < 158.0.1

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 158.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-114 advisory. - Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which...

PT-2026-129115

Pillow is a Python imaging library. Prior to 13.0.0 on Windows, src/PIL/WmfImagePlugin.py passes unchecked 32-bit WMF or EMF dimensions to the native drawwmf handler in src/display.c. The handler sizes a DIB allocation from 16-bit-truncated bcWidth and bcHeight fields but copies pixel data using...

Red Hat: CVE-2026-114501: pillow: Pillow: Information disclosure via improper memory alignment during Arrow export

Pillow is a Python imaging library. From 11.2.1 until 13.0.0, Arrow export assumes that an image's rows are tightly contiguous and exports from im-blocks0.ptr even when PILLOWALIGNMENT makes alignedlinesize include row padding or an aligned offset before the first row. The resulting Arrow buffer...

PT-2026-120440

A flaw was found in libmodulemd. In builds with rpmio support enabled, compressed modulemd YAML is decompressed through a custom read handler that does not enforce a cumulative decompressed-size limit before parsing. An attacker who can supply a highly compressible compressed YAML file can cause...

PT-2026-120161

Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect stack tip pointer when internal function calls are performed inside arrays. Contracts placing internal calls in nested array elements, external call arguments, struct literals, or raw log topics can...

PT-2026-120832

Name of the Vulnerable Software and Affected Versions Pillow versions prior to 13.0.0 Description The SpiderImageFile.seek function in src/PIL/SpiderImagePlugin.py reparses a later SPIDER stack frame and replaces self. size without rerunning the Image. decompression bomb check function. This allo...

CVE-2021-48020: Out-of-bounds Write

Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect stack tip pointer when internal function calls are performed inside arrays. Contracts placing internal calls in nested array elements, external call arguments, struct literals, or rawlog topics can...

PT-2026-120563

Use-after-free in the RTMP protocol implementation in Apache bRPC version RtmpChunkStream::SerializeMessage runs concurrently on sender threads and dereferences the same RtmpChunkStream object without synchronization. If a remote peer sends an Abort message naming a chunk stream that is...

PT-2026-120532

The RTMP AMF parser in Apache bRPC accepts AMF string lengths and array counts directly from untrusted input. A remote unauthenticated attacker who can reach a bRPC server with RTMP enabled can send a small AMF payload with an excessive declared long string length or array count, causing excessiv...

PT-2026-120534

The Redis protocol implementation in Apache bRPC allowed inline command parsing to allocate and copy the full connection buffer before a complete CRLF-terminated command was available. A remote attacker with access to a Redis-protocol bRPC service could send long inline inputs without a terminati...

Linux Distros Unpatched Vulnerability : CVE-2026-113317

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in Accessibility in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the...

Linux Distros Unpatched Vulnerability : CVE-2026-113241

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in Toolbar in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the...

Apache bRPC resource management error vulnerability

Versions of Apache bRPC prior to 1.18.0 contain a resource management error vulnerability. This vulnerability arises because the stream message reassembly path does not limit the cumulative size of fragmented messages upon resending them. Remote attackers can send an infinite stream of resending...

PT-2026-120809

Name of the Vulnerable Software and Affected Versions Algorithm::UrataniTakeda versions 0.1.5 through 0.1.6 Description An issue exists where memory exhaustion can occur due to a failure shift cache in the search process that is never cleared. The failure shift is cached for each pair of trie sta...

PT-2026-120640

Name of the Vulnerable Software and Affected Versions NTPsec ntpd versions prior to 1.2.6 Description A heap-based buffer overflow exists in the JJY refclock driver. An attacker controlling the Telephone JJY time source can corrupt memory or cause the ntpd process to crash by sending more than si...

PT-2026-120608

WarehousePG WHPG 7.2.1 through 7.6.0 is affected by a missing authorization vulnerability CWE-862 in the built-in function gp log backend memory contexts. Any authenticated database role can run this function without a GRANT. It also gets around the superuser restriction that PostgreSQL places on...

Linux Distros Unpatched Vulnerability : CVE-2026-95502

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Git server that Grafana's Git Sync provisioning is configured to use can exhaust Grafana's memory by returning oversized or highly compressed responses...

PT-2026-120641

Name of the Vulnerable Software and Affected Versions NTPsec ntpd versions prior to 1.2.6 Description An out-of-bounds read exists in the Motorola Oncore refclock driver. An attacker who controls the GPS receiver's serial data can cause the ntpd process to crash or disclose memory by sending a PP...

vLLM resource management error vulnerability

A resource management error vulnerability exists in vLLM versions from 0.24.0 up to but including 0.31.0. This vulnerability arises because the MOSS-Audio model service stores processor values corresponding to mmprocessorkwargs controlled by requests in an unbounded dictionary. Unauthenticated...