570524 matches found
TencentOS Server 3: nodejs:22 (TSSA-2026:0922)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0922 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
Linux Distros Unpatched Vulnerability : CVE-2026-18374
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Passing an effectively empty string to the ,ccs= syntax extension of the mode argument in the fopen function in the GNU C Library version 2.45 or earlier may...
TencentOS Server 3: dracut (TSSA-2026:0902)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0902 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
TencentOS Server 3: 389-ds:1.4 (TSSA-2026:0909)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0909 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
The vulnerability of the punkt_pickle_load() function in the Natural Language processing and statistical processing library package allows a hacker to execute arbitrary code.
The vulnerability of the punktpickleload function in the NLTK library for symbolic and statistical processing of natural language is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of the `GitConfigParser._read()` function in the `git/config.py` module of the Python library for interacting with Git repositories in GitPython allows a attacker to execute arbitrary code.
The vulnerability of the GitConfigParser.read function in the git/config.py module of the Python library for interacting with Git repositories in GitPython is related to the implementation or modification of arguments. Exploiting this vulnerability could allow a malicious actor to execute arbitra...
The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems allows attackers to disclose protected information.
The vulnerability of the Windows Ancillary Function Driver for WinSock operating systems is related to the transmission of critical information in open text. Exploiting this vulnerability can allow an attacker to disclose protected information...
The vulnerability of the `__acquires()` function in the drivers/usb/chipidea/udc.c module of the Linux operating system’s USB device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the acquires function in the drivers/usb/chipidea/udc.c module of the Linux device driver framework is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...
TencentOS Server 3: python-idna (TSSA-2026:0900)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0900 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
The vulnerability of the validatePublicHttpUrl() function in the Lightdash data visualization and analysis tool allows a hacker to gain unauthorized access to protected information and cause service failures.
The vulnerability of the validatePublicHttpUrl function in the Lightdash data visualization and analysis tool is related to insufficient validation of requests on the server side. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information and cause...
The vulnerability of the getTarSpec() function in the tools/rpmbuild.cc component of the RPM package manager allows a hacker to execute arbitrary code.
The vulnerability of the getTarSpec function in the tools/rpmbuild.cc component of the RPM package manager is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of the vcn_v3_0_dec_msg() function in the drivers/gpu/drm/amd/amdgpu/vcn_v3_0.c driver for AMD GPU cores in the Direct Rendering Infrastructure (DRI) of the Linux operating system allows a hacker to access protected information or cause a service failure.
The vulnerability of the vcnv30decmsg function in the drivers/gpu/drm/amd/amdgpu/vcnv30.c driver for AMD GPU cores in Linux’s Direct Rendering Infrastructure DRI kernel is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability can allow an attacker to access...
The vulnerability of the scalar_byte_swap() function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support for Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the scalarbyteswap function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter for Linux kernel, relates to the execution of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the s3fwrn82_uart_read() function in the drivers/nfc/s3fwrn5/uart.c file of the Linux operating system’s NFC driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the s3fwrn82uartread function in the drivers/nfc/s3fwrn5/uart.c file of the Linux NFC driver module is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to...
The vulnerability of the q54sj108a2debugfs_read() function in the drivers/hwmon/pmbus/q54sj108a2.c file of the device monitoring driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the q54sj108a2debugfsread function in the drivers/hwmon/pmbus/q54sj108a2.c file, a driver for hardware monitoring in the Linux operating system, involves copying buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerabilit...
The vulnerability of the rockchip_sfc_probe() function in the drivers/spi/spi-rockchip-sfc.c driver for SPI devices in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the rockchipsfcprobe function in the drivers/spi/spi-rockchip-sfc.c driver for SPI devices in the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability could allow a remote attacker to compromise the...
TencentOS Server 3: frr (TSSA-2026:0894)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0894 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
PT-2026-82579
AVideo before 24.0 contains a server-side request forgery vulnerability in the isSSRFSafeURL function that fails to extract embedded IPv4 addresses from NAT64, 6to4, and Teredo IPv6 transition address formats. Unauthenticated attackers can bypass SSRF protections via the LiveLinks proxy endpoint ...
PT-2026-82774
Bendix EC80 Brake ECU is vulnerable to a stack-based buffer overflow, which may allow an attacker to crash the ECU. A crafted payload can then be used to remotely execute arbitrary code or inject arbitrary CAN bus traffic. This could cause the loss of the ABS function, steering assist, speedomete...
ROS-20260827-73-0019
The vulnerability of the imxclkscuallocdev function in the drivers/clk/imx/clk-scu.c driver for the Samsung Exynos CPU in Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...