30733 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-19696
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows denial of service on Windows CVE-2026-19696 Note that Nessus relies on th...
ROS-20260813-73-0055
The vulnerability in perl-XML-Parser is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2026-19694
TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service...
PT-2026-80543
libxls through version 1.6.3 contains a use of uninitialized memory vulnerability in the OLE container parser. Memory allocated for the Master Sector Allocation Table MSAT in read MSAT is not fully initialized before being consumed by ole2 validate sector chain, which may result in application...
CVE-2026-19695
Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service...
PT-2026-80558
Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. Prior to version 0.28.8, an out-of-bounds read was found. The vulnerability is in the CRW image parser. This issue has been patched in version 0.28.8...
PT-2026-102481
Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.8 Description A crash in the PEAK CAN TRC file parser can lead to a denial of service. Recommendations Update to version 4.6.9...
PT-2026-102477
Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.8 Description A flaw in the TTL file parser can lead to an infinite loop, resulting in a denial of service. Recommendations Update to version 4.6.9...
CVE-2026-19694: Heap-based Buffer Overflow
TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service...
Linux Distros Unpatched Vulnerability : CVE-2026-19695
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service CVE-2026-19695 Note that Nessus relies on the presence of the package as reported ...
MiracleLinux 9 : python3.14-3.14.5-1.el9_8.1 (AXSA:2026-1523:05)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1523:05 advisory. python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations CVE-2026-15308 Tenable has extracted the preceding...
CVE-2026-10534
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser...
CVE-2026-10534 IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parser
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser...
CVE-2026-10534
IBM Db2 11.5.0–11.5.9 and 12.1.0–12.1.5 suffer a CWE-121 stack-based buffer overflow in the IXF IMPORT parser, exploitable locally for full confidentiality, integrity, and availability impact. IBM provides interim security updates: Security Update #87984 for V11.5.9 (APAR DT471716), #86025 for V1...
CVE-2026-10534
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser...
CVE-2026-10534 IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parser
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser...
CVE-2026-73434
A flaw was found in GStreamer gst-plugins-good avidemux. In gstavidemuxriffparsevprp, the number of available gstriffvprpvideofielddesc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp-fields value, rather than by sizeofgstriffvprpvideofielddesc. This ca...
DEBIAN-CVE-2026-73434
A flaw was found in GStreamer gst-plugins-good avidemux. In gstavidemuxriffparsevprp, the number of available gstriffvprpvideofielddesc entries is calculated by dividing the remaining buffer size by the attacker-controlled vprp-fields value, rather than by sizeofgstriffvprpvideofielddesc. This ca...
CVE-2026-18952
Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to the threat intel source configuration endpoint...