30626 matches found
PT-2026-69740
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The OCC poll response parser in the hwmon module fails to properly validate the boundaries of sensor data blocks. The parser incorrectly uses the static backing-array capacity as the...
PT-2026-80042
TuxCare rebuilt fast-xml-parser to address 1 CVE. Fixed in 4.5.3-tuxcare.5...
CVE-2026-72904: Improper Neutralization of Special Elements used in a Command
Firecrawl turns entire websites into LLM-ready markdown or structured data. Prior to 2.11.32, a critical arbitrary file read vulnerability exists in Firecrawl's extraction functionality due to unsafe schema dereferencing of user-supplied JSON schemas in...
PT-2026-69679
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Out-of-bounds reads exist in the remote DPCD and I2C sideband reply parsers. The functions drm dp sideband parse remote dpcd read and drm dp sideband parse remote i2c read ack perform a...
PT-2026-69725
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The ivrs acpihid command-line parser fails to validate the number of entries added to the early acpihid map array. Because this array has a fixed size of four elements, the parser does n...
PT-2026-69931
Name of the Vulnerable Software and Affected Versions Typemill CMS versions 2.x Description A persistent cross-site scripting issue exists in the Markdown parser extension. Authenticated users with theme-configuration access can inject malicious JavaScript URIs by providing unsanitized href value...
PT-2026-69748
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The TAS2781 firmware parser in the ASoC ALSA System on Chip component uses strlen to read variable-length description strings without first verifying the presence of a NUL terminator...
PT-2026-80479
A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion depth when resolving nested directives. Specially crafted or overly complex schemas can cause excessive recursion during parsing. This may...
PT-2026-69452
Name of the Vulnerable Software and Affected Versions Redis versions prior to 8.8.2 Description An out-of-bounds read occurs when the getPingExtLength function in the cluster bus message parser fails to validate extension length fields against the actual remaining buffer size. This allows an...
PT-2026-69481
Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw exists in the PSD file format plugin where an unsigned integer underflow occurs in the block rem variable when opening a specially crafted .psd image file. This underflow causes parser...
PT-2026-69520
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A TX hang can occur during packet transmission due to how the hardware parses protocol headers. The hardware parser expects additional data when processing incomplete IPv4, IPv6, TCP, or...
PT-2026-69973
Name of the Vulnerable Software and Affected Versions Firecrawl versions prior to 2.11.32 Description An arbitrary file read and Server-Side Request Forgery SSRF issue exists in the extraction functionality. The problem stems from unsafe schema dereferencing of user-supplied JSON schemas in the...
Photon OS 5.0: Libxml2 PHSA-2026-5.0-91-0874
An update of the libxml2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0874. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Linux Distros Unpatched Vulnerability : CVE-2026-68279
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers drmdpsidebandparseremotedpcdread reads numbytes from the raw message and then unconditional...
Linux Distros Unpatched Vulnerability : CVE-2026-68277
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers Three sideband reply parsers read 16-bit fields as: val = raw-msgidx msgidx+1 %NASLMINLEVE...
Debian dsa-6428 : libyaml-syck-perl - security update
The remote Debian 13 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-6428 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6428-1 [email protected] https://www.debian.org/securit...
Photon OS 5.0: Expat PHSA-2024-5.0-91-0364
An update of the expat package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0364. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Expat PHSA-2025-5.0-91-0435
An update of the expat package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0435. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
xmloxide v0.5.0
xmloxide A pure Rust reimplementation of libxml2 — the de facto standard XML/HTML parsing library in the open-source world. libxml2 became officially unmaintained in December 2025 with known security issues. xmloxide aims to be a memory-safe, high-performance replacement that passes the same...
