RHEL 9 : libssh (RHSA-2026:62217)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62217 advisory. libssh is a library which implements the SSH protocol. It can be used to implement client and server applications. Security Fixes: libssh:...

TencentOS Server 3: python-urwid (TSSA-2026:0932)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0932 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

TencentOS Server 2: gstreamer1-plugins-good (TSSA-2026:0934)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0934 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

Alibaba Cloud Linux 3 : 0270: gstreamer1-plugins-bad-free (ALINUX3-SA-2026:0270)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0270 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-19387: A heap out-of-bounds write...

MiracleLinux 8 : libxml2-2.9.7-21.el8_10.7 (AXSA:2026-1714:07)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1714:07 advisory. libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow CVE-2026-11979 Tenable has extracted the preceding description block...

openSUSE 16: postgresql14 / postgresql14-contrib / postgresql14-devel / etc (openSUSE-SU-2026:21699-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21699-1 advisory. - CVE-2026-6464: psql COPY FROM STDIN early failure processes data lines as psql commands bsc1275046. - CVE-2026-6469: ALTER TABLE ALTER TYPE...

PostgreSQL 18.x < 18.6 Multiple Vulnerabilities

The version of PostgreSQL installed on the remote host is 18 prior to 18.6. As such, it is potentially affected by multiple vulnerabilities: - Heap buffer overflow in PostgreSQL pgstatstatements allows the query author to execute arbitrary code as the operating system user running the database, v...

aotopsy v1.1.0

AOTopsy A Dart AOT snapshot analyzer. Turns libapp.so — the compiled Dart code inside a Flutter release APK — into function names, class layouts, call graphs, behavioral signals, and readable pseudocode. No Dart VM, no SDK compilation, no runtime fallback. Fork notice: AOTopsy is a fork of...

seccomp-tools v1.7.1

Seccomp Tools Powerful tools for seccomp analysis. This project is aimed primarily but not exclusively at analyzing seccomp sandboxes in CTF pwn challenges. Some features are CTF-specific, but they're just as useful for analyzing real-world seccomp filters. Features Dump - Automatically dumps...

SUSE-SU-2026:23414-1 Security update for c-ares

This update for c-ares fixes the following issues: Update to c-ares 1.34.8. - CVE-2025-31498: use-after-free in readanswers when processanswer may re-enqueue a query bsc1240955. - CVE-2025-62408: use-after-free due to connection being cleaned up after error bsc1254738. - CVE-2026-33630: remotely...

MGASA-2026-0353 Updated openssl packages fix security vulnerabilities

Unbounded Memory Growth in QUIC Server Incoming Channel Queue. CVE-2026-14456 QUIC Server May Trigger Double Free When Processing INITIAL Packet. CVE-2026-18798 Heap Buffer Overflow in CMS Key Unwrapping. CVE-2026-63072 Invalid Pointer Dereference in CMP Server via Crafted protectionAlg...

Updated openssl packages fix security vulnerabilities

Unbounded Memory Growth in QUIC Server Incoming Channel Queue. CVE-2026-14456 QUIC Server May Trigger Double Free When Processing INITIAL Packet. CVE-2026-18798 Heap Buffer Overflow in CMS Key Unwrapping. CVE-2026-63072 Invalid Pointer Dereference in CMP Server via Crafted protectionAlg...

CVE-2026-82821

A vulnerability was determined in FLVMeta up to 1.2.2. Affected by this vulnerability is the function amfobjectget of the file src/amf.c of the component AMF Object Parsing. This manipulation causes null pointer dereference. The attack may be initiated remotely. The exploit has been publicly...

DEBIAN-CVE-2026-82821

A vulnerability was determined in FLVMeta up to 1.2.2. Affected by this vulnerability is the function amfobjectget of the file src/amf.c of the component AMF Object Parsing. This manipulation causes null pointer dereference. The attack may be initiated remotely. The exploit has been publicly...

CVE-2026-82821

A vulnerability was determined in FLVMeta up to 1.2.2. Affected by this vulnerability is the function amfobjectget of the file src/amf.c of the component AMF Object Parsing. This manipulation causes null pointer dereference. The attack may be initiated remotely. The exploit has been publicly...

UBUNTU-CVE-2026-82821

A vulnerability was determined in FLVMeta up to 1.2.2. Affected by this vulnerability is the function amfobjectget of the file src/amf.c of the component AMF Object Parsing. This manipulation causes null pointer dereference. The attack may be initiated remotely. The exploit has been publicly...

CVE-2026-14367

The I3C IBI subsystem in drivers/i3c/i3cibiworkq.c hands out statically-allocated work nodes through a free-list i3cibiworknodesfree implemented as a plain sysslistt, which provides no synchronization. The allocation helpers i3cibiworkenqueue, i3cibiworkenqueuetargetirq, i3cibiworkenqueuehotjoin,...

CVE-2023-20511

Release of an invalid pointer in the AMD kernel mode driver KMD could allow a privileged attacker to create a double free condition potentially leading to arbitrary code execution...

CVE-2026-82821 FLVMeta AMF Object Parsing amf.c amf_object_get null pointer dereference

A vulnerability was determined in FLVMeta up to 1.2.2. Affected by this vulnerability is the function amfobjectget of the file src/amf.c of the component AMF Object Parsing. This manipulation causes null pointer dereference. The attack may be initiated remotely. The exploit has been publicly...

CVE-2026-82821 FLVMeta AMF Object Parsing amf.c amf_object_get null pointer dereference

A vulnerability was determined in FLVMeta up to 1.2.2. Affected by this vulnerability is the function amfobjectget of the file src/amf.c of the component AMF Object Parsing. This manipulation causes null pointer dereference. The attack may be initiated remotely. The exploit has been publicly...