openSUSE 16: sequoia-sq / sequoia-sq-bash-completion / etc (openSUSE-RU-2026:22132-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-RU-2026:22132-1 advisory. Changes in sequoia-sq: - Use crypto-openssl also for tests Update to version 1.5.0: tool: Release v1.5.0. tool: Fix link to README. tool: Set a...

SUSE SLES12: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2026:4806-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4806-1 advisory. Firefox Extended Support Release 153.5.0 ESR MFSA 2026-108, bsc1284493: - CVE-2026-109704: Privilege escalation in the Application...

openSUSE 16: MozillaFirefox / MozillaFirefox-branding-upstream / etc (openSUSE-SU-2026:22139-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22139-1 advisory. Firefox Extended Support Release 153.5.0 ESR MFSA 2026-108, bsc1284493: - CVE-2026-109704: Privilege escalation in the Application Update...

PT-2026-121400

Name of the Vulnerable Software and Affected Versions multer versions 2.0.0 through 2.4.9 Description A race condition exists in the multipart parser when configured with an asynchronous fileFilter function. If a request is aborted while an asynchronous fileFilter is still pending, the callback m...

PT-2026-121413

Name of the Vulnerable Software and Affected Versions opentelemetry-api versions 1.0.0 through 1.45.0 Description The TraceState.from header function in opentelemetry/trace/span.py, which is accessed via TraceContextTextMapPropagator.extract, uses a regular expression to parse inbound W3C...

PT-2026-121728

Report metadata | Field | Value | | --- | --- | | Package | @graphql-tools/utils npm, pkg:github/ardatan/graphql-tools | | Repository | https://github.com/ardatan/graphql-tools | | Component | mergeIncrementalResult / setObjectKeyPath packages/utils/src/mergeIncrementalResult.ts | | Vulnerability...

Debian dla-4849 : expat - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4849 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4849-1 [email protected]...

PT-2026-120890

A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268 B20221104. Affected by this issue is the function UploadCustomModule of the file lib/cste modules/product.so. Executing a manipulation of the argument FileMd5 can lead to command injection. The attack can be launched remotely. The exploit has...

Linux fs/jbd2/journal.c Heap Buffer Overflow DoS

The vulnerability of the jbd2journalinitializefastcommit function in the fs/jbd2/journal.c component of the Linux operating system is related to incorrect calculations. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

FreeRDP RDP Unauthenticated Access

The vulnerability of the smartcardTransmitCall function in the RDP client FreeRDP is related to the exposure of sensitive information. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Cisco Identity Services Engine Auth Bypass RCE

The vulnerability of the Cisco Identity Services Engine ISE platform relates to the absence of authentication for a critical function. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Linux kernel S3FB Heap Buffer Overflow DoS

The vulnerability of the s3pciprobe function in the drivers/video/fbdev/s3fb.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the batadvfragsendpacket function in the net/batman-adv/fragmentation.c component of the Linux kernel is related to insufficient control over resources with dynamic management. Exploiting this vulnerability could allow an attacker to cause a service failure...

UBUNTU-CVE-2026-98869

In the Linux kernel, the following vulnerability has been resolved: bpf: Infer zextdst based on static register liveness analysis As reported in the thread 1, the verifier's 32-bit operations zero extension logic is broken. This logic is responsible for correct semantics of 32-bit operations on...

XonshActivator quote() Code Execution

The vulnerability of the quote function in the XonshActivator class, a tool for creating isolated virtual environments in Python’s virtualenv, is related to improper code generation due to the use of outdated multi-byte encoding. Exploiting this vulnerability could allow an attacker to execute...

PT-2026-121391

A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a578. Impacted is an unknown function of the file patappointtime.php of the component Appointment Booking. This manipulation of the argument day/time/appdate causes improper input...

Linux kernel regulator_lock_two Heap Buffer Overflow DoS

The vulnerability of the regulatorlocktwo function in the drivers/regulator/core.c component of the Linux kernel is related to the improper implementation of control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Linux GPU DoS

The vulnerability of the v3dgetcpuindirectcsdparams function in the drivers/gpu/drm/v3d/v3dsubmit.c component of the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

Nodemailer MessageParser parseHeaders DoS

The vulnerability of the MessageParser.parseHeaders function in the Nodemailer email sending library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

LEDS Kernel Data Compromise

The vulnerability of the uledswrite function in the drivers/leds/uleds.c file of the Linux kernel relates to the execution of operations outside of the buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the protected information...