413727 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-96636
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. Prior to 13.0.0, MpoImageFile.seek and DcxImageFile.seek reparse later MPO or DCX frames and replace self.size without...
Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142714)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142714 advisory. In the Linux kernel, the following vulnerability has been resolved: mips: sched: Fix CPUMASKOFFSTACK memory corruption This patch addresses a critical memory...
Rocky Linux 8 [CIQ] Security Update: apcu-panel / libzip / libzip-debuginfo / libzip-debugsource / etc Multiple Vulnerabilities (crlsa-2026_87080)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202687080 advisory. php: php: Out-of-bounds read via empty HTTP redirect Location header CVE-2026-93682 php: PHP: Archive entry injection via integer overflow in TAR parser...
Apache NiFi MiNiFi C++ 1.0.0 Uncontrolled Memory Allocation
Summary MiNiFi - a subproject of Apache NiFi - is a complementary data collection approach that supplements the core tenets of NiFi in dataflow management, focusing on the collection of data at the source of its creation. Description Apache NiFi MiNiFi C++ contain an uncontrolled memory allocatio...
SUSE SLES12 Security Update : busybox (SUSE-SU-2026:4773-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4773-1 advisory. - CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow whe...
RHEL 9 : php (RHSA-2026:87151)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:87151 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: php: Denial of Service via...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-142708)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142708 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: fix XDR length calculation in nfsd4ffencodelayoutget The XDR buffer size calculation in...
Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142713)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142713 advisory. In the Linux kernel, the following vulnerability has been resolved: IB/mad: Drop unmatched RMPP responses before reassembly Kernel-handled RMPP receive processing...
Windows Error Reporting Privilege Escalation
The vulnerability of the Windows Error Reporting WER error reporting service in Windows operating systems is related to operations that go beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to increase their privileges...
HPE ArubaOS security vulnerabilities
A security vulnerability exists in HPE ArubaOS. It stems from a memory corruption flaw that may allow unauthenticated remote attackers to launch denial-of-service attacks, thereby compromising the availability of affected services...
HPE ArubaOS security vulnerabilities
A security vulnerability exists in HPE ArubaOS. It stems from a memory corruption flaw in the web management interface. Authenticated low-privilege attackers with local access can exploit this vulnerability to view certain system files and disrupt the normal operation of affected services...
HPE ArubaOS security vulnerabilities
A security vulnerability exists in HPE ArubaOS. It stems from a memory corruption flaw in services accessed via the PAPI protocol, which may allow unauthenticated remote attackers to launch denial-of-service attacks, thereby compromising the availability of affected services...
PT-2026-134748
Security vulnerability affects the rundeck package. A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory allocation and potentially exhaust the JVM heap...
Linux Distros Unpatched Vulnerability : CVE-2026-114143
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse repeatedly slices and rejoins every path prefix in lib/compiler.js while...
Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142697)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142697 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix integer overflow in amdgpucspass1 The type of size is unsigned int, if size is...
Linux Distros Unpatched Vulnerability : CVE-2026-114041
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in clientclipresentgatewaymessage that passes a byte count as wide-character printf precisio...
Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142537)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142537 advisory. In the Linux kernel, the following vulnerability has been resolved: igbvf: Fix leak in TX DMA error cleanup If an error is encountered while mapping TX buffers, the...
Fedora 43 : nicotine+ (2026-843c104a8c)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-843c104a8c advisory. Version 3.3.11 September 16, 2026 Changes Added menu items for moving column headers due to broken drag-and-drop in GTK Enabled fixed number of upload slots ...
SUSE SLES15 Security Update : busybox (SUSE-SU-2026:4798-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4798-1 advisory. - CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow whe...
Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142760)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142760 advisory. In the Linux kernel, the following vulnerability has been resolved: sctp: fix authchunklist capacity check in sctpauthepaddchunkid sctpauthepaddchunkid uses...