PT-2026-84050

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.15.0 Description A flaw exists where an attacker can craft a PDF file that triggers long runtimes. This occurs when the read until whitespace function in pypdf/ utils.py processes a stream containing a long sequence o...

PT-2026-83772

Name of the Vulnerable Software and Affected Versions klaussilveira GitList version 2.0.0 Description A remote denial of service can be triggered through the XML Parsing component. The issue resides in the SimpleXMLElement function within the src/SCM/System/Git/CommandLine.php file. Recommendatio...

PT-2026-83959

When Ethernet bridging is enabled CONFIG NET ETHERNET BRIDGE, eth bridge input process in subsys/net/l2/ethernet/bridge/bridge input.c decides how each frame received on a bridge member interface is handled. For frames that must also be delivered to the local stack, the code called eth bridge...

RockyLinux 9 : nodejs:22 (RLSA-2026:61383)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:61383 advisory. nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion via...

The vulnerability of the most_register_interface() function in the drivers/most/core.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the mostregisterinterface function in the drivers/most/core.c module of the Linux kernel’s firmware is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a perpetrator to cause service failures...

The vulnerability of the xfrm_migrate_policy_find() function in the net/xfrm/xfrm_policy.c module of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the xfrmmigratepolicyfind function in the net/xfrm/xfrmpolicy.c module of the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ufshcd_add_commandtrace() function in the drivers/ufs/core/ufshcd.c file allows a hacker to cause a service failure for UFS-host controllers in Linux operating systems.

The vulnerability of the ufshcdaddcommandTrace function in the drivers/ufs/core/ufshcd.c file relates to the support for UFS host controllers in the Linux operating system’s kernel. This vulnerability involves the use of pointers. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the functions dcache_init_early() and dcache_init() in the fs/dcache.c module of the Linux kernel’s file system allows a attacker to access protected information or cause service failures.

The vulnerability of the functions dcacheinitearly and dcacheinit in the fs/dcache.c module of the Linux kernel’s file system is related to a cyclic shift. Exploiting this vulnerability can allow an attacker to access protected information or cause service failures...

Debian dla-4765 : expat - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4765 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4765-1 [email protected]...

SUSE SLES12 Security Update : kernel (Live Patch 79 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:3826-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3826-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.299 fixes various security issues: The following security issues were fixed: -...

Amazon Linux 2023 : gstreamer1-plugins-good, gstreamer1-plugins-good-gtk (ALAS2023-2026-2121)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2121 advisory. GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer...

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2026-130 (ALASKERNEL-5.10-2026-130)

The version of kernel installed on the remote host is prior to 5.10.265-265.1078. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2026-130 advisory. In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption...

Linux Distros Unpatched Vulnerability : CVE-2026-38343

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow in the libavfilter/vfscale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service DoS via supplying a...

Linux Distros Unpatched Vulnerability : CVE-2026-80673

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the look-ahead attribute- list entry in ntfsexternalattrfind When resolving an...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge web browsers allows attackers to trigger a service failure.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...

Amazon Linux 2 : firefox, --advisory ALAS2FIREFOX-2026-064 (ALASFIREFOX-2026-064)

The version of firefox installed on the remote host is prior to 140.14.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2FIREFOX-2026-064 advisory. Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the...

SUSE SLED15 / SLES15 Security Update : go1.26-openssl (SUSE-SU-2026:3816-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3816-1 advisory. Update to version 1.26.7 cut from the go1.25-fips-release at the revision tagged go1.26.7-1-openssl-fips...

SUSE SLES12 Security Update : kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:3808-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3808-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.317 fixes various security issues: The following security issues were fixed: -...

Amazon Linux 2023 : firefox (ALAS2023-2026-2105)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2105 advisory. Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts function in xmlparse.c, where processing N specified attributes with...

Linux Distros Unpatched Vulnerability : CVE-2026-26447

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stomper 5e2741e is vulnerable to Use-After-Free. When a single client repeatedly issues SUBSCRIBE commands for the same destination over one connection and then...