CVE-2024-14043

A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mmes6asubscriptiondatafromavp of the file src/mme/mme-fd-path.c of the component Diameter S6a Interface. Executing a manipulation of the argument msisdnlen can lead to heap-based buffer overflow. It is...

cve-check

cve-check description: Claude Skill to Look up rich meta...

ECHO-7034-9751-0B4F

Bulletin has no description...

CVE-2026-68969: Insertion of Sensitive Information into Log File

Apache Airflow wrote Variable values and Connection extra contents to the audit log in cleartext when they were submitted through the bulk endpoints PATCH /api/v2/variables and PATCH /api/v2/connections. The audit-log masking recognised only top-level request fields, and a bulk request nests its...

PT-2026-80502

GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive end-of-file newline markers can corrupt internal hunk single block of changes in diff data structures, causing the application to pass a NULL pointer...

PT-2026-80503

GNU patch is vulnerable to a denial of service DoS due to improper validation of hunk single block of changes in diff line offsets in unified-diff input. A specially crafted patch can specify an extremely large line number, causing the application to enter an effectively infinite processing loop...

grafana security, bug fix, and enhancement update

10.2.6-28.4 - Resolves RHEL-211020: CVE-2026-33377 10.2.6-28.3 - Resolves RHEL-211376: CVE-2026-8609 10.2.6-28.2 - Resolves RHEL-210981: CVE-2026-33376 10.2.6-28.1 - Resolves RHEL-211389: CVE-2026-33382 10.2.6-28 - Resolves RHEL-188282: Remove Lua ExclusiveArch macro for Konflux build...

Linux Distros Unpatched Vulnerability : CVE-2026-18724

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - open-iscsi: open-iscsi: Stack buffer overflow in idbm record parsing CVE-2026-18724 open-iscsi: open- iscsi: Out-of-bounds access in iscsiuio ICMPv6 echo handli...

PT-2026-70979

A security flaw has been discovered in Open5GS up to 2.7.6. Impacted is the function smf gx cca cb of the component SMF Diameter Gx Credit-Control-Answer Handler. The manipulation results in denial of service. The attack can be launched remotely. The exploit has been released to the public and ma...

Linux Distros Unpatched Vulnerability : CVE-2025-35973

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper handling of values for some IntelR Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege. Authorized...

GitLab 19.2 < 19.2.2 (CVE-2026-16627)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.2... CVE-2026-16627 Note that Nessus has not tested for this issue but has instead relied only on the...

Linux Distros Unpatched Vulnerability : CVE-2026-68306

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix possible NULL- pointer deref in mt7996mcustabfereht...

Photon OS 5.0: Libxml2 PHSA-2026-5.0-92-0946

An update of the libxml2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0946. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-12061

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Natural Language Toolkit NLTK: ReDoS in NLTK ReviewsCorpusReader FEATURES regex CVE-2026-12061 Note that Nessus relies on the presence of the package as reporte...

Linux Distros Unpatched Vulnerability : CVE-2026-68446

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate vmwsurfacemetadata::arraysize This field comes from userspace and shoul...

Photon OS 5.0: Glib PHSA-2026-5.0-92-0947

An update of the glib package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0947. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-18725

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - open-iscsi: open-iscsi: Stack buffer overflow in idbm record parsing CVE-2026-18724 open-iscsi: open- iscsi: Out-of-bounds access in iscsiuio ICMPv6 echo handli...

Linux Distros Unpatched Vulnerability : CVE-2026-12074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Natural Language Toolkit NLTK has path traversal in FramenetCorpusReader.frame that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox...

Linux Distros Unpatched Vulnerability : CVE-2026-68270

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: Avoid possible truncation with calculating visible size Calculating the visible...

Linux Distros Unpatched Vulnerability : CVE-2026-12072

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Natural Language Toolkit NLTK: Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox ENFORCE=True CVE-2026-12072...