CVE-2026-112381

A flaw was found in Apache Traffic Server. A race condition can allow an unauthenticated remote attacker to cause a Denial of Service DoS by crashing the server. This vulnerability occurs when a client terminates a POST request connection while the server is processing a chunked origin response,...

CVE-2026-93236

A flaw was found in the Linux kernel's Meson video decoder driver. When processing video format negotiation requests with an unsupported format on the output queue, the driver improperly falls back to a format that may not be supported by the platform format table. This issue leads to a NULL...

CVE-2026-99024

A flaw was found in the Linux kernel's OP-TEE Open Portable Trusted Execution Environment driver. The driver registers device interfaces before internal data structures are fully initialized. A local user can access the device during this initialization window, triggering uninitialized mutex...

ONNX: Null Pointer Dereference In ScanInferenceFunction Due To Missing Required Attribute

Summary ONNX shape inference did not safely validate the required Scan "numscaninputs" attribute. Two malformed values could terminate or disrupt the process: 1. If the attribute was missing, "ctx.getAttribute"numscaninputs"" returned null and was dereferenced. 2. If the attribute was negative,...

PT-2026-130663

A NULL pointer dereference flaw was found in 389-ds-base. This flaw occurs when a ModifyDN rename operation uses an attribute's schema alias name such as "commonName" instead of its canonical name such as "cn" as the new relative distinguished name. An authenticated attacker with the ModifyDN...

CVE-2026-117548: Red Hat: A NULL pointer dereference flaw was found in 389-ds-base

A NULL pointer dereference flaw was found in 389-ds-base. This flaw occurs when a ModifyDN rename operation uses an attribute's schema alias name such as "commonName" instead of its canonical name such as "cn" as the new relative distinguished name. An authenticated attacker with the ModifyDN...

Important: freerdp

Issue Overview: Fix GHSA-66mr-7wc7-23vc: FreeRDP client can abort while logging a malformed RDPDR device announcement Fix GHSA-x7w3-32ch-x2jq: winpr image conversion: heap over-read encoding 16 bpp DIBs to PNG; malformed PNG/JPEG abort or exit the process Fix GHSA-fqw6-jf2h-6fj6: RDPGFX ALPHA...

Alibaba Cloud Linux 3 : 0326: freerdp (ALINUX3-SA-2026:0326)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0326 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-91953: FreeRDP versions before...

AlmaLinux 9.6 [TuxCare] Security Update: libreswan Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793271759)

The AlmaLinux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793271759 advisory. - Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of...

Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability

Cisco Secure Firewall ASA Software and Cisco Secure FTD Software contains an unchecked return value to NULL pointer dereference vulnerability that could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service DoS condition...

CVE-2026-117548

A NULL pointer dereference flaw was found in 389-ds-base. This flaw occurs when a ModifyDN rename operation uses an attribute's schema alias name such as "commonName" instead of its canonical name such as "cn" as the new relative distinguished name. An authenticated attacker with the ModifyDN...

RockyLinux 8 : libreswan (RLSA-2026:90492)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:90492 advisory. libreswan: IKEv2 Use-After-Free bug when using IKE-over-TCP CVE-2026-94453 libreswan: IKEv2 pre-authentication Null Pointer deref in EAP code...

Linux Distros Unpatched Vulnerability : CVE-2026-117548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference flaw was found in 389-ds-base. This flaw occurs when a ModifyDN rename operation uses an attribute's schema alias name such as...

RT-Labs p-net improper exception handling vulnerability

Versions prior to RT-Labs p-net 1.0.3 contain an improper exception handling vulnerability. This vulnerability arises when processing implicit read requests targeting AR records; if a valid target AR UUID is missing, it dereferences a NULL AR pointer. As a result, remote unauthenticated attackers...

389 Directory Server improper exception handling vulnerability

The 389 Directory Server has an improper exception handling vulnerability. This vulnerability arises when a ModifyDN operation uses a pattern alias for an attribute—such as “commonName”—instead of the standard name—such as “cn”—as the new relative distinguishable name. This results in a null...

Rocky Linux 9.6 [TuxCare] Security Update: libreswan Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1793271759)

The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793271759 advisory. - Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication. As a result of...

RHEL 8 : libreswan (RHSA-2026:90492)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:90492 advisory. Libreswan is an implementation of IPsec and IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide...

Amazon Linux 2023 : freerdp, freerdp-devel, freerdp-libs (ALAS2023-2026-3342)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3342 advisory. Fix GHSA-66mr-7wc7-23vc: FreeRDP client can abort while logging a malformed RDPDR device announcement Fix GHSA-x7w3-32ch-x2jq: winpr image conversion: heap over-read encoding 16 bpp DIBs to PN...

CentOS Linux 6 [TuxCare] Security Update: libpng / libpng-devel / libpng-static Multiple Vulnerabilities (CENTOS6:CLSA-2026:1792994241)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1792994241 advisory. - The pngsettext2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before...

GHSA-M4PR-6V3C-6FGR ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute

Summary ONNX shape inference did not safely validate the required Scan numscaninputs attribute. Two malformed values could terminate or disrupt the process: 1. If the attribute was missing, ctx.getAttribute"numscaninputs" returned null and was dereferenced. 2. If the attribute was negative,...