ROS-20261007-73-0104

The vulnerability of the em28xxv4l2open function in the drivers/media/usb/em28xx/em28xx-video.c driver for multimedia devices of the Linux operating system is related to synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability could allow an attacker to...

SUSE SLES15: libpython3_12-1_0 / python312 / python312-base / python312-curses / etc (SUSE-SU-2026:4534-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4534-1 advisory. - CVE-2025-13462: incorrect parsing of TarInfo header when GNU long name and type AREGTYPE are combined bsc1259611. - CVE-2026-0864...

PT-2026-107566

Name of the Vulnerable Software and Affected Versions Gophish versions prior to 0.12.2 Description A timing discrepancy exists in the AdminServer.Login function. Unauthenticated attackers can enumerate valid usernames by submitting candidate names to the 'POST /login' endpoint and measuring the...

PT-2026-107539

Name of the Vulnerable Software and Affected Versions praisonai-platform versions prior to 0.1.9 Description Issue dependency deletion can be authorized against the wrong side of a dependency edge. A workspace member can delete a dependency from an owner-created issue by accessing it through a...

PT-2026-107591

Name of the Vulnerable Software and Affected Versions Homer versions prior to 11.0.283 Description In fresh deployments using internal authentication, the bootstrap process automatically creates an admin account with a hard-coded password sipcapture. This password is stored as a legacy SHA-256 he...

PT-2026-107503

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the Linux kernel within the tcp send synack function. When the function replaces a cloned SYN skb at the head of the retransmit queue with a copy, it fre...

CVE-2026-107161: Heap-based Buffer Overflow

A heap-based buffer overflow flaw was found in Cyrus SASL. The addtochallenge function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge/response field before DIGEST-MD5 quoting is applied, but does not recompute that size when quoting escaping special characters mak...

The vulnerability of the readblock() function in the runtime/intern.c file of the OCaml programming language allows a hacker to execute arbitrary code.

The vulnerability of the readblock function in the runtime/intern.c file of the OCaml programming language is related to reading data beyond the allowed range of memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

PT-2026-107655

Name of the Vulnerable Software and Affected Versions github.com/xuri/excelize/v2 versions 2.0.0 through 2.11.0 github.com/xuri/excelize versions 1.1.0 through 1.4.1 Description An issue exists where the ColumnNameToNumber function accumulates a bijective base-26 value in an int64 without detecti...

PT-2026-107562

Name of the Vulnerable Software and Affected Versions LMCache versions 0.5.5 and earlier Description An unauthenticated remote code execution issue exists where remote attackers can execute Python code by sending scripts to the '/run script' endpoint. By leveraging the injected FastAPI app object...

CVE-2026-107125: Heap-based Buffer Overflow

A flaw has been found in XnView Classic 2.52.5. Impacted is an unknown function of the component FLI File Parser. This manipulation of the argument startingline causes heap-based buffer overflow. Remote exploitation of the attack is possible. Upgrading to version 2.52.6 is recommended to address...

Wireshark 1.12.x < 1.12.9 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.12.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.12.9 advisory. - The ngsnifferprocessrecord function in wiretap/ngsniffer.c in the Sniffer file parser in Wireshark...

Wireshark 1.8.x < 1.8.9 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.8.9. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.8.9 advisory. - The dissectperlengthdeterminant function in epan/dissectors/packet-per.c in the ASN.1 PER dissector in...

Wireshark 1.4.x < 1.4.10 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.4.10. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.4.10 advisory. - The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark...

PT-2026-107387

Name of the Vulnerable Software and Affected Versions wolfSSH versions prior to 1.5.1 Description When built with the --enable-fwd flag, the DoChannelOpen function in src/internal.c only applies the forwarding policy callback to direct-tcpip channel opens. Consequently, forwarded-tcpip opens are...

AlmaLinux 8 : nodejs:22 (ALSA-2026:75870)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:75870 advisory. pacote: Pacote: Denial of Service via crafted spec.rawSpec value in addGitSha function CVE-2026-9496 undici: undici: Denial of Service via unrequested...

AlmaLinux 9.2 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc (ALMALINUX9.2:CLSA-2026:1791403199)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791403199 advisory. - The stringprep module didn't process characters from RFC 3454 tables B.2 or B.3 correctly: the latest Unicode codepoint attributes were use...

Wireshark 1.8.x < 1.8.8 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.8.8. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.8.8 advisory. - The dissectpft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.6...

Wireshark 1.10.x < 1.10.11 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.10.11. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.10.11 advisory. - The dissectwritestructuredfield function in epan/dissectors/packet-tn5250.c in the TN5250 dissector...

ROS-20261007-73-0381

The vulnerability of the nftcttimeoutobjdestroy function in the net/netfilter/nftct.c module of the netfilter component of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...