ROS-20260831-73-0009

The vulnerability of the apescapequotes function in the Apache HTTP Server is related to the lack of input validation in this function. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

ROS-20260831-73-0010

The vulnerability of the PyImagingMapBuffer function in the src/map.c component of the Pillow image processing library is related to the issue of the operation exceeding the buffer’s boundaries. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause servi...

Linux Distros Unpatched Vulnerability : CVE-2026-38345

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Division-by-Zero vulnerability in the ffswsinitsinglecontext function /libswscale/utils.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of...

Linux Distros Unpatched Vulnerability : CVE-2026-82623

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UADataValuebackendcopyRange of the file...

Amazon Linux 2023 : python3.14-pip, python3.14-pip-wheel (ALAS2023-2026-2093)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2093 advisory. Internationalized Domain Names in Applications IDNA for Python provides support for Internationalized Domain Names in Applications IDNA and Unicode IDNA Compatibility Processing. In versions prior to...

The vulnerability of the build_mapping() function in the net/xfrm/xfrm_user.c module, which is part of the Linux kernel’s networking functions, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the buildmapping function in the net/xfrm/xfrmuser.c module, which is part of the Linux kernel’s networking functions, relates to the use of uninitialized variables. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the wdm_in_callback() function in the drivers/usb/class/cdc-wdm.c file of the Linux operating system’s USB device driver module allows a hacker to cause a service failure.

The vulnerability of the wdmincallback function in the drivers/usb/class/cdc-wdm.c file of the Linux operating system’s USB device driver framework is related to security configuration errors. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the xfrm_migrate_policy_find() function in the net/xfrm/xfrm_policy.c module of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the xfrmmigratepolicyfind function in the net/xfrm/xfrmpolicy.c module of the Linux kernel is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-80593

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hwmon: asusatk0110 Check package count before accessing element atkecpresent walks the management group package returned by the GGRP ACPI method and, for each...

The vulnerability of the auth_server() function in the Rsync file transfer and synchronization utility allows a attacker to bypass existing security mechanisms.

The vulnerability of the authserver function in the Rsync file transfer and synchronization utility is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to bypass existing security mechanisms remotely...

The vulnerability of the comedi_device_attach() function in the drivers/comedi/drivers.c module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the comedideviceattach function in the drivers/comedi/drivers.c module of the Linux kernel is related to incorrect initialization of resources. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability in the function dcn401_init_hw() of the drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c driver module of the Direct Rendering Infrastructure (DRI) graphics card driver for the Linux operating system’s kernel. This vulnerability allows a attacker to cause a service failure.

The vulnerability of the dcn401inithw function in the drivers/gpu/drm/amd/display/dc/hwss/dcn401/dcn401hwseq.c driver of the Direct Rendering Infrastructure DRI module for AMD video cards in Linux operating systems is related to pointer aliasing. Exploiting this vulnerability could allow a remote...

The vulnerability of the ksz_ptp_msg_irq_setup() function in the drivers/net/dsa/microchip/ksz_ptp.c module of the DSA kernel of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the kszptpmsgirqsetup function in the drivers/net/dsa/microchip/kszptp.c module of the DSA kernel of the Linux operating system is related to improper memory release memory leak. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

The vulnerability of the most_register_interface() function in the drivers/most/core.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the mostregisterinterface function in the drivers/most/core.c module of the Linux kernel’s firmware is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a perpetrator to cause service failures...

The vulnerability of the ufshcd_add_commandtrace() function in the drivers/ufs/core/ufshcd.c file allows a hacker to cause a service failure for UFS-host controllers in Linux operating systems.

The vulnerability of the ufshcdaddcommandTrace function in the drivers/ufs/core/ufshcd.c file relates to the support for UFS host controllers in the Linux operating system’s kernel. This vulnerability involves the use of pointers. Exploiting this vulnerability could allow an attacker to cause a...

Amazon Linux 2023 : apr-util, apr-util-devel, apr-util-ldap (ALAS2023-2026-2115)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2115 advisory. APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel...

Amazon Linux 2023 : firefox (ALAS2023-2026-2105)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2105 advisory. Expat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts function in xmlparse.c, where processing N specified attributes with...

Amazon Linux 2023 : python3.13-pip, python3.13-pip-wheel (ALAS2023-2026-2089)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2089 advisory. Internationalized Domain Names in Applications IDNA for Python provides support for Internationalized Domain Names in Applications IDNA and Unicode IDNA Compatibility Processing. In versions...

PT-2026-83871

Incorrect access control in the setWiFiMeshConfig function of TOTOLINK T6 4.1.5cu.748 B20211015 allows unauthenticated attackers to alter mesh configurations via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

Important: vim

Issue Overview: Vim is an open source, command line text editor. Prior to version 9.2.0565, the updatesnapshot function in src/terminal.c copies the visible terminal screen into the scrollback buffer when a snapshot is taken. For each screen cell it walks the cell's chars array with no upper boun...