728989 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-71079
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/ODBC. The supported version that is affected is 26.7.0. Easily exploitable...
Linux Distros Unpatched Vulnerability : CVE-2026-71137
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable...
PT-2026-79064
Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...
Linux Distros Unpatched Vulnerability : CVE-2026-71084
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/ODBC. The supported version that is affected is 26.7.0. Easily exploitable...
The vulnerability of the ascii() function in the PostgreSQL database management system allows attackers to disclose sensitive information.
The vulnerability of the ascii function in the PostgreSQL database management system is related to reading data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...
Oracle Java SE Multiple Vulnerabilities (August 2026 CSPU)
The 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2 versions of Java installed on the remote host are affected by multiple vulnerabilities as referenced in the August 2026 CSPU advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of...
PT-2026-79179
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information and cause a denial of service due to a kernel heap over-read...
PT-2026-79259
Ghidra before 12.1.3 contains an uncontrolled resource consumption vulnerability in the PDB parser that allows attackers to terminate the Ghidra process by supplying a crafted PDB file with an oversized parameters section. The AbstractPdb deserialization routine reads all remaining parameters int...
VulnCheck KEV: CVE-2022-0995
An out-of-bounds OOB memory write flaw was found in the Linux kernel’s watchqueue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system...
quickjs-ng: Multiple Vulnerabilities
Background quickjs-ng is a small and embeddable JavaScript engine. It aims to support the latest ECMAScript specification. It is a fork of QuickJS. Description Multiple vulnerabilities have been discovered in quickjs-ng. Please review the CVE identifiers referenced below for details. Impact Pleas...
The vulnerability of the ConvertToRegularExpression function in the src/OpenColorIO/FileRules.cpp component of the OpenColorIO color management framework allows a malicious actor to trigger a service failure.
The vulnerability of the ConvertToRegularExpression function in the src/OpenColorIO/FileRules.cpp component of the OpenColorIO color management framework is related to the output of the operation being stored outside of the buffer. Exploiting this vulnerability could allow an attacker to cause a...
Security update for python-pytest-html (important)
openSUSE security update: security update for python-pytest-html ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21602-1 Rating: important References: bsc1275374 bsc1275437 Cross-References: CVE-2026-73088 CVE-2026-73089 CVSS scores: CVE-2026-73088...
PT-2026-79190
Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally...
PT-2026-79143
Name of the Vulnerable Software and Affected Versions libvips versions prior to 8.18.3 Description The old-style Radiance RLE Run-Length Encoding decoder in libvips/foreign/radiance.c contains a flaw where it can process a repeat marker at the start of a scanline in the scanline read old function...
PT-2026-79233
Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A remote attacker could cause a denial of service due to a NULL pointer dereference, which occurs when a program attempts to read or write to a memory address tha...
PT-2026-79237
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A local attacker can cause a denial of service through an out-of-bounds write, which occurs when data is written outside the intended memory boundary of a buffer...
PT-2026-78883
In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted XML content...
Linux Distros Unpatched Vulnerability : CVE-2026-76889
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UMTS FP protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76889 Note that Nessus relies on the presence of the...
Linux Distros Unpatched Vulnerability : CVE-2026-76882
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth Attribute Protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76882 Note that Nessus relies on the presen...
Linux Distros Unpatched Vulnerability : CVE-2026-76922
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth BR/EDR FHS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76922 Note that Nessus relies on the...