EUVD-2025-210386

picklescan before 0.0.28 fails to detect malicious pickle files using torch.utils.collectenv.run function in reduce methods. Attackers can embed undetected code in pickle files that executes remote commands when loaded by victims...

PT-2026-54513

DVP80ES3 with Improper Resource Shutdown or Release vulnerability...

PT-2026-55484

Name of the Vulnerable Software and Affected Versions OnionShare versions prior to 2.6.4-1.1 Description In Receive mode, the software writes uploaded files to the system even when file uploads have been explicitly disabled. Recommendations Update to version 2.6.4-1.1...

ROS-20260701-73-0014

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

PT-2026-54857

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-26 Description The -concatenate operation lacks necessary policy checks. This flaw allows the software to read from and write to file paths that are explicitly disallowed by the security policy, enabling a...

PT-2026-54632

Name of the Vulnerable Software and Affected Versions pretix-oppwa affected versions not specified Description An issue exists where the system improperly concatenates an unvalidated resourcePath query parameter into the Oppwa API base URL when building outbound requests. This occurs because the...

ROS-20260701-73-0049

The vulnerability of the ramfskillsb function in the Linux operating system is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260701-73-0047

The vulnerability in the kernel-lt is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260701-73-0033

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

Fedora 43 : chromium (2026-7f29bc3622)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7f29bc3622 advisory. Update to 149.0.7827.200 CVE-2026-13281: Integer overflow in Mojo CVE-2026-13282: Use after free in Payments CVE-2026-13283: Use after free in...

Oracle Linux 8 : thunderbird (ELSA-2026-33445)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-33445 advisory. 140.12.0-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 140.12.0 - Add OpenELA debranding 140.12.0-1 - Update to 140.12.0 ESR...

Oracle Linux 7 : firefox (ELSA-2026-26551)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-26551 advisory. - Update to 140.10.2 ESR Orabug: 39534787CVE-2026-8090CVE-2026-8092 CVE-2026-8094 - Update to 140.10.1 ESR Orabug: 39481850CVE-2026-7320CVE-2026-7321...

Fedora 43 : collectd / varnish / varnish-modules / vmod-querystring (2026-7f36ec4c65)

The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-7f36ec4c65 advisory. Update to latest 7.7.x release available, a security release. Includes fixes for VSV00017 aka CVE-2025-8671, aAdded patches for for VSV00018 aka...

CVE-2026-12575: Improper Resource Shutdown or Release

DVP80ES3 with Improper Resource Shutdown or Release vulnerability...

ROS-20260701-73-0054

The vulnerability of the gicconfigureirq function in the Linux operating system is related to the improper release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

NILFS2 File System Heap Buffer Overflow DoS

The vulnerability of the nilfsvalidsb function in the fs/nilfs2/thenilfs.c file of the NILFS2 file system in the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to access protected information or cause servic...

NVIDIA Virtual GPU Manager Data Compromise

The vulnerability of the NVIDIA Virtual GPU Manager driver relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

imxfb_probe Heap Buffer Overflow DoS

The vulnerability of the imxfbprobe function in the drivers/video/fbdev/imxfb.c driver for kernel-based graphics device drivers in the Linux operating system is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service...

Linux kernel Virtio Net Buffer Overflow DoS

The vulnerability of the virtnetfreezedown and virtnetrestoreup functions in the drivers/net/virtionet.c module of the Linux kernel’s network device support driver is related to improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to access protected...

CVE-2026-56328

Capgo before 12.128.2 allows multiple public channels for the same app and platform to coexist simultaneously, while unnamed /updates requests without defaultChannel implicitly resolve to a single hidden winner channel. An authorized app or channel manager can create ambiguous default update stat...