ROS-20261008-73-0105

The vulnerability of the qcomslimngdctrlprobe function in the drivers/slimbus/qcom-ngd-ctrl.c module of the SLIMbus driver in the Linux operating system is related to the access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

PT-2026-107998

Name of the Vulnerable Software and Affected Versions ILIAS versions prior to 9.24 ILIAS versions 10.x prior to 10.12 ILIAS versions 11.x prior to 11.5 Description An argument injection issue exists in assImagemapQuestionGUI that allows question authors to inject ImageMagick convert options throu...

PT-2026-108644

Summary A crafted SVG bypasses enshrined/svg-sanitize's href validation and delivers a javascript: URL through the sanitizer unchanged. The bypass exploits a semantic mismatch between XML entity resolution used during sanitization and HTML5 Named Character Reference resolution used by the browser...

PT-2026-108248

Name of the Vulnerable Software and Affected Versions fast-jwt versions prior to 6.3.4 Description An expiration-check bypass exists when caching is enabled. The createVerifier cache may continue accepting a signed JSON Web Token JWT after its expiration time if the token contains an exp expirati...

PT-2026-108140

Name of the Vulnerable Software and Affected Versions MongoDB C Driver affected versions not specified Description The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. This allows subsequent append or comparison operations to underfl...

PT-2026-108147

Name of the Vulnerable Software and Affected Versions MariaDB Connector/Node.js versions 3.2.0 through 3.2.4 MariaDB Connector/Node.js versions 3.3.x prior to 3.3.4 MariaDB Connector/Node.js versions 3.4.x prior to 3.4.7 MariaDB Connector/Node.js versions 3.5.x prior to 3.5.4 Description When the...

PT-2026-108145

Name of the Vulnerable Software and Affected Versions MariaDB Connector/Node.js versions 3.3.0 through 3.5.3 Description A denial of service issue exists in the zero-configuration TLS fingerprint-validation path. When the connector validates a server's identity via...

PT-2026-108153

Name of the Vulnerable Software and Affected Versions dot-access versions 0.0.3 through 1.0.0 Description A code injection flaw exists where the get function concatenates user-supplied paths into a new Function body within index.js. This allows remote attackers to access constructor.constructor t...

PT-2026-108297

Name of the Vulnerable Software and Affected Versions Azure App Service affected versions not specified Description Missing authentication for a critical function allows an unauthorized, network-reachable attacker to execute arbitrary code without providing credentials. Recommendations At the...

PT-2026-108305

Name of the Vulnerable Software and Affected Versions SumatraPDF versions 3.6.1 and earlier SumatraPDF version 3.7.0.20369 Description When WebView2 is absent or fails to initialize, the ParseProtoUrl function accepts the signed host component of an its:// URL, which is then used by the...

PT-2026-108306

Name of the Vulnerable Software and Affected Versions SumatraPDF versions prior to 3.6.2 Description The ChmFile::GetCharZ function narrows file-controlled unsigned string offsets from /WINDOWS and /IVB to signed integers without performing a lower-bound check. If an offset becomes negative, the...

PT-2026-108289

Name of the Vulnerable Software and Affected Versions Strawberry GraphQL versions 0.217.0 through 0.326.0 Description In the PermissionExtension.resolve function on a synchronous field resolver, the result of has permission is evaluated for truthiness. If a custom permission defines has permissio...

ROS-20261008-73-0011

The vulnerability of the brndsend function in the Linux operating system is related to reading data beyond the permitted range of memory. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality and accessibility of protected information...

UBUNTU-CVE-2026-104074

Coturn 4.10.0 contains an uninitialized memory disclosure vulnerability that allows remote unauthenticated attackers to leak stack memory contents by sending a TURN Allocate request without credentials. Attackers can exploit the stuniniterrorresponsecommonstr function in src/client/nsturnmsg.c,...

RockyLinux 9 : nodejs:22 (RLSA-2026:76750)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:76750 advisory. pacote: Pacote: Denial of Service via crafted spec.rawSpec value in addGitSha function CVE-2026-9496 undici: undici: Denial of Service via unrequested...

RHEL 9 : nodejs:22 (RHSA-2026:76750)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:76750 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language...

EulerOS 2.0 SP15 : jbig2dec (EulerOS-SA-2026-3981)

According to the versions of the jbig2dec packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An integer overflow in the jbig2arithiaidctxnew function of Artifex commit cc37d0 allows attackers to cause a Denial of Service DoS via a crafte...

ROS-20261008-73-0075

The vulnerability of the ctnetlinkallocexpect function in Linux operating systems is related to access to an uninitialized pointer. Exploiting this vulnerability can allow an attacker to disclose confidential information...

CVE-2026-88257: Improper Input Validation

Improper Input Validation vulnerability in BeamMCP.Schema in ScriptKittyOS beammcp allows an MCP client to reach a tool's dispatch function with arguments that violate the input schema the server advertised. BeamMCP.Schema.validate/2 checked type, required, additionalProperties, enum and numeric...

PT-2026-108206

Name of the Vulnerable Software and Affected Versions libming versions 0.4.8 and earlier Description A remote attacker can cause a denial of service by exploiting the readtag file function located in src/blocks/fromswf.c. Recommendations Update libming to a version later than 0.4.8. As a temporar...