Linux Distros Unpatched Vulnerability : CVE-2026-111128

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone...

Adobe FrameMaker 2022 < 17.0.10.928 (2022.0.10.928) / Adobe FrameMaker 2026 < 18.0.1.312 (2026.0.1.312) Multiple Vulnerabilities (APSB26-172)

The version of Adobe FrameMaker installed on the remote Windows host is prior to Adobe FrameMaker 2022 17.0.10.928 / Adobe FrameMaker 2026 18.0.1.312. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb26-172 advisory. - Adobe Framemaker is affected by an out-of-bound...

AlmaLinux 9.2 [TuxCare] Security Update: libreswan (ALMALINUX9.2:CLSA-2026:1792158739)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792158739 advisory. - Libreswan has a null pointer dereference bug in the PKCS7 handling code for IKE certificate authentication. When libreswan decodes an IKE...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131747)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131747 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix NULL deref in ntfsupdatemftmirr If ntfsfillsuper wasn't called then sbi-sb will be...

Linux Distros Unpatched Vulnerability : CVE-2026-111129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Open Asset Import Library assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D binary mesh importer's...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131753)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131753 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix null-ptr-deref on inode-iop in ntfslookup Syzbot reported a null-ptr-deref bug:...

Adobe Substance 3D Designer <= 16.0.5 Multiple Vulnerabilities (APSB26-169)

The version of Adobe Substance 3D Designer installed on the remote host is prior or equal to 16.0.5. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-169 advisory. - Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in...

Linux Distros Unpatched Vulnerability : CVE-2026-111144

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libansilove 1.3.0 through 1.4.2 contains a NULL pointer dereference vulnerability in ansilovexbin that allows attackers to crash applications by supplying a...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131726)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131726 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix missing iop in ntfsreadmft There is null pointer dereference because iop == NULL. T...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131770)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131770 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Check 'folio' pointer for NULL It can be NULL if bmap is called. Tenable has extracted...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131742)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131742 advisory. In the Linux kernel, the following vulnerability has been resolved: net/smc: fix NULL dereference and UAF in smctcpsynrecvsock Syzkaller reported a panic in...

ROS-20261016-73-0005

The vulnerability of the gfs2evict inode function in the fs/gfs2/super.c module of the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE CVE-2026-98400

In the Linux kernel, the following vulnerability has been resolved: s390/ipl: Fix NULL deref in kdump without re-IPL parm block Some IPL types, like HMC FTP boot or QEMU direct kernel boot, might not provide an IPL parameter block. In this case, reipltypeinit selects IPLTYPEUNKNOWN, and...

SUSE CVE-2026-110829

FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets CHANNELFLAGLAST without CHANNELFLAGFIRST. A malicious RDP server can send a malformed rdpsnd PDU on a fresh channel to crash the client and cause denial of service...

SUSE CVE-2026-110834

FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP servers to crash clients by sending out-of-lifecycle serial IRPs. Attackers can send IRPMJREAD or IRPMJWRITE before create or after close, causing CommReadFile or CommWriteFile to...

THM-Steel_Mountain-CVE-2014-6287

THM-SteelMountain-CVE-2014-6287 A write up on the Steel Mountain box from TryHackMe.com and exploit for CVE-2014-6287 Credits I take no credit for the original discovery and exploitation of this vulnerability. Thank you to the following people! Discovery: Daniele Linguaglossa Metasploit Module...

EUVD-2023-59906

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CLSA-2026-1792097614 Fix CVE(s): CVE-2026-107778

SECURITY UPDATE: NULL pointer dereference in krb5rdcred - debian/patches/CVE-2026-107778.patch: reject a KRB-CRED message whose encrypted ticket-info list is shorter than its tickets list in src/lib/krb5/krb/rdcred.c makecredlist; backport of upstream commit 48afa9abb89ab2176bb20624d87d010b9984fc...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference due to improper handling of array schemas that omit the items keyword in request validation. An attacker can cause the application to panic and potentially crash by submitting crafted requests that trigger...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference through the resolveComponent process in the OpenAPI specification loader when handling a self-referential $ref in additionalProperties without proper nil-checks. An attacker can cause the application to crash by...