CVE-2026-62994 affecting package coredns for versions less than 1.11.4-20

CVE-2026-62994 affecting package coredns for versions less than 1.11.4-20. A patched version of the package is available...

CVE-2026-54886 affecting package erlang for versions less than 26.2.5.21-4

CVE-2026-54886 affecting package erlang for versions less than 26.2.5.21-4. A patched version of the package is available...

JLSEC-2026-1267 A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function...

A vulnerability was identified in uclouvain openjpeg up to 2.5.4. This impacts the function opjpiinitialiseencode in the library src/lib/openjp2/pi.c. The manipulation leads to integer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. The...

CVE-2026-11325

Description Cloudflare was recently notified by external researchers of vulnerabilities in this archived repository, including a remote code execution issue in src/index.ts reachable from certain GitHub Actions workflow configurations. Successful exploitation may expose workflow secrets such as...

Linux Distros Unpatched Vulnerability : CVE-2026-68446

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate vmwsurfacemetadata::arraysize This field comes from userspace and shoul...

Linux Distros Unpatched Vulnerability : CVE-2026-18724

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - open-iscsi: open-iscsi: Stack buffer overflow in idbm record parsing CVE-2026-18724 open-iscsi: open- iscsi: Out-of-bounds access in iscsiuio ICMPv6 echo handli...

Linux Distros Unpatched Vulnerability : CVE-2026-12061

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Natural Language Toolkit NLTK: ReDoS in NLTK ReviewsCorpusReader FEATURES regex CVE-2026-12061 Note that Nessus relies on the presence of the package as reporte...

Linux Distros Unpatched Vulnerability : CVE-2026-18725

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - open-iscsi: open-iscsi: Stack buffer overflow in idbm record parsing CVE-2026-18724 open-iscsi: open- iscsi: Out-of-bounds access in iscsiuio ICMPv6 echo handli...

Linux Distros Unpatched Vulnerability : CVE-2026-62901

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network. CVE-2026-62901 Note that Nessus relies on the presenc...

MINI-HWW2-M9VF-FXG4

Bulletin has no description...

PT-2026-70240

Fooocus is an image generating software. In versions 2.5.5 and prior, the Fooocus web UI is vulnerable to remote code execution due to the unsafe use of eval when processing metadata JSON. An attacker with access to the Fooocus web UI may be able to execute arbitrary code on the instance. As of...

Linux Distros Unpatched Vulnerability : CVE-2026-73144

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-qccg-7pw6-787v: FRN module: unbounded memory growth CVE-2026-73144 Note that Nessus relies on the presence of...

Linux Distros Unpatched Vulnerability : CVE-2026-73147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-pc2g-2p95-4cr5: TCL command injection in reflector client CVE-2026-73147 Note that Nessus relies on the presen...

Linux Distros Unpatched Vulnerability : CVE-2026-73149

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-mh75-5pr3-qv2p: NetRx: out-of-bounds read via unvalidated MsgAudio length CVE-2026-73149 Note that Nessus reli...

PT-2026-70622

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description An out-of-bounds read exists in Microsoft Office Word, which allows an unauthorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds re...

Linux Distros Unpatched Vulnerability : CVE-2026-73146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-r2gm-p682-3mpm: svxreflector: use-after-free via reentrant client deletion CVE-2026-73146 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2026-73143

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-38fq-mrrg-8rmr: RtlTcp: malformed greeting causes daemon exit CVE-2026-73143 Note that Nessus relies on the...

PYSEC-2026-3655 pypdf: Possible large memory usage for large /ToUnicode streams

Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires parsing the /ToUnicode entry of a font with unusually large values, for example during text extraction. Patches This has been fixed in pypdf==6.15.0. Workarounds If you cannot...

Photon OS 5.0: Vim PHSA-2026-5.0-92-0785

An update of the vim package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0785. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Expat PHSA-2025-5.0-91-0435

An update of the expat package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0435. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...