The vulnerability of the RDP client FreeRDP, related to reading beyond the buffer in memory, allows a hacker to trigger a service failure.

The vulnerability of the RDP client FreeRDP relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

ROS-20260925-73-0138

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

The vulnerability of the BuildKit container-building software lies in its ability to distribute resources indefinitely, allowing a hacker to cause service failures.

The vulnerability of the BuildKit container-building software lies in its ability to distribute resources indefinitely. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the libssh library, related to improper checking of the return value of functions, allows a hacker to cause a service failure.

The vulnerability of the libssh library is related to improper checking of the return value of a function. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...

The vulnerability of the golang-x-image package, a programming language, arises from insufficient resource control during its existence, allowing attackers to trigger a service failure.

The vulnerability of the golang-x-image package, a programming language, is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...

The vulnerability of the BuildKit container-building software lies in insufficient validation of input data, which allows a hacker to trigger a service failure.

The vulnerability of the BuildKit container-building software lies in insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : rsyslog vulnerability (USN-8786-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8786-1 advisory. It was discovered that rsyslog incorrectly calculated buffer sizes when replacing strings. A remote...

openSUSE 16 Security Update : libX11 (openSUSE-SU-2026:21908-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21908-1 advisory. This update for libX11 fixes the following issue: - CVE-2026-88806: XkbGetMap Reply Heap-based Buffer Overflow bsc1280910. Tenable has extracted the...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenJDK 8 vulnerabilities (USN-8784-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8784-1 advisory. Kai Aizen discovered that the Networking component of OpenJDK 8 did not correctly handle user...

Fedora 46 : golang-x-image (2026-2d6aee1dc4)

The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-2d6aee1dc4 advisory. Automatic update for golang-x-image-0.46.0-2.fc46. Changelog Fri Sep 25 2026 lex Sez - 0.46.0-2 - Add requiresexclude Fri Sep 25 2026 Packit -...

ROS-20260925-73-0027

The vulnerability of the macsecpostdecrypt function in the drivers/net/macsec.c module of the network device driver for the Linux operating system is related to the bypassing of the authentication process. Exploiting this vulnerability allows a remote attacker to compromise the integrity of...

openSUSE 16 Security Update : cloudflared (openSUSE-SU-2026:21924-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21924-1 advisory. Changes in cloudflared: - Update version to 2026.9.1 Update vendor boo1278643, CVE-2026-56854, CVE-2026-78662, CVE-2026-56855 Propagate edge...

Fedora 44 : mingw-gdk-pixbuf (2026-16f1152378)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-16f1152378 advisory. Backport fixes for CVE-2026-16768 and CVE-2026-81893. Tenable has extracted the preceding description block directly from the Fedora security...

Linux Distros Unpatched Vulnerability : CVE-2026-59990

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jawn is an open source JSON parser. Prior to 1.7.0, Jawn parse methods accept arbitrarily deep JSON array and object nesting without a depth limit, allowing a...

Oracle Linux 9 : perl-DBI (ELSA-2026-71422)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-71422 advisory. 1.643-9.6 - Force placeholder limit on : and :p too CVE-2026-73194 Related: RHEL-247327 Tenable has extracted the preceding description block directly from the...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : Memcached vulnerability (USN-8792-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8792-1 advisory. It was discovered that Memcached incorrectly handled ASCII authentication. A remote attacker could possibly use this issue to cause...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : GStreamer Base Plugins vulnerability (USN-8797-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8797-1 advisory. It was discovered that GStreamer Base Plugins incorrectly handled certain OGG media files. A remote...

The vulnerability of the BuildKit container-building software lies in insufficient validation of input data, which allows a hacker to trigger a service failure.

The vulnerability of the BuildKit container-building software lies in insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to cause service failures...

CVE-2026-88387

A flaw was found in LibRaw. A remote attacker can exploit this vulnerability by supplying a specially crafted image file containing an out-of-range metadata value. Due to improper range validation during numeric conversion in the parsetiffifd function, processing the malformed file triggers an...

CVE-2026-97366

A security flaw has been discovered in jhen0409 react-native-debugger up to 0.14.0. The impacted element is the function openDevTools of the file electron/window.js of the component Open in Editor Handler. The manipulation of the argument host results in os command injection. It is possible to...