177356 matches found
ALSA-2026:82280 Moderate: tftp security update
The Trivial File Transfer Protocol TFTP is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server subpackages. The tftp subpackage provides the user interface for TFTP and the tftp-server subpackage provides the server. This allows users to...
Microsoft Office: CVE-2026-70214: Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
CVE-2026-105595: Out-of-bounds Read
Out-of-bounds read in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-97839: Role: DNS Server Information Disclosure Vulnerability
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
Microsoft Windows: CVE-2026-70294: Win32k Information Disclosure Vulnerability
Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
PT-2026-113265
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-111952
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
PT-2026-111929
Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network...
PT-2026-111536
FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in http chuncked read that allows malicious RD Gateways to hang clients by sending incomplete chunked responses. Attackers can send a partial chunk-size line or footer followed by a clean TLS shutdown, causing zero-byte read...
Microsoft SQL Server: CVE-2026-88081: Microsoft SQL Server Information Disclosure Vulnerability
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : Perl vulnerabilities (USN-8675-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8675-1 advisory. It was discovered that Perl incorrectly handled short source addresses in the Socket module. An attacker...
Security Updates for Microsoft Office Online Server (October 2026)
The Microsoft Office Online Server or Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : BlueZ vulnerabilities (USN-8908-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8908-1 advisory. Michael Bommarito discovered that BlueZ incorrectly handled codec capability storage in the...
Ubuntu 26.04 LTS : openCryptoki vulnerabilities (USN-8707-1)
The remote Ubuntu 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8707-1 advisory. It was discovered that primitive decoders in openCryptoki produced integer underflows when the encoded length was zero. An attacker could possibly use th...
Fortinet FortiManager Multiple Arbitrary File Read/Write via SQLi (FG-IR-26-178)
The version of FortiManager installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the FG-IR-26-178 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported...
Oracle Linux 8 : perl-DBI (ELSA-2026-77576)
The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-77576 advisory. 1.641-4 - CVE-2026-88815 perl-DBI: perl-DBI: Denial of Service via invalid memory read during numeric type casting memory read during numeric type casting...
CentOS Linux 7 [TuxCare] Security Update: freerdp / freerdp-devel / freerdp-libs / libwinpr / libwinpr-devel Multiple Vulnerabilities (CENTOS7:CLSA-2026:1791568721)
The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1791568721 advisory. - FreeRDP versions before 3.31.0 contain a heap buffer overflow vulnerability in negosendnegotiationrequest that fails to validate the...
UBUNTU-CVE-2026-107821
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB insufficiently validated counts, offsets, lengths, and field boundaries in FRM metadata while opening binary FRM files. An attacker able to place a craft...