CVE-2026-68956: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP ssh allows an authenticated remote attacker to exhaust node memory by repeatedly opening session channels that are never assigned a handler. The "session" clause of sshconnection:handlemsg/4 checks only...

PT-2026-97105

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description Remote attackers could obtain sensitive information because the software transmits sensitive data in cleartext, which is unencrypted data se...

CVE-2026-93952: Improper Input Validation

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

ROS-20260922-73-0063

The vulnerability in Tomcat11 is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers, who operate remotely, to gain increased privileges...

VulnCheck KEV: CVE-2026-93952

Arista VeloCloud Orchestrator VCO on-prem contains an improper input validation vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the...

ROS-20260922-73-0091

The vulnerability of the modhdcpreadrxidlist function in the drivers/gpu/drm/amd/display/modules/hdcp/hdcpddc.c driver module of the Direct Rendering Infrastructure DRI driver for AMD graphics cards in Linux operating systems is related to the execution of operations outside of the buffer...

PT-2026-97096

Name of the Vulnerable Software and Affected Versions IBM Financial Transaction Manager FTM for RedHat OpenShift affected versions not specified Description A remote attacker could obtain sensitive information because the software uses a hard-coded or predictable cryptographic key. Cryptographic...

PT-2026-96763

Name of the Vulnerable Software and Affected Versions php-file-manager-with-code-editor versions prior to 3.1 Description An unrestricted file upload issue exists in the Save Handler component. A remote attacker can manipulate the filename and content arguments within the file put contents functi...

Arista VeloCloud Orchestrator Improper Input Validation Vulnerability

Arista VeloCloud Orchestrator VCO on-prem contains an improper input validation vulnerability that may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the...

apptainer-1.5.3-4.1 on GA media (moderate)

apptainer-1.5.3-4.1 on GA media Announcement ID: openSUSE-SU-2026:11830-1 Rating: moderate Cross-References: CVE-2026-56854 CVE-2026-84303 CVE-2026-84304 CVE-2026-84445 CVSS scores: CVE-2026-56854 SUSE : 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVE-2026-56854 SUSE : 8.6...

ROS-20260922-73-0104

The vulnerability in the 389-ds-base is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-97001

Name of the Vulnerable Software and Affected Versions Analytics and Location Engine ALE API affected versions not specified Description An unauthenticated remote attacker can cause the disclosure of sensitive information by providing specially crafted input to a specific API endpoint. This issue...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: dnsmasq (UTSA-2026-090246)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090246 advisory. A flaw was found in dnsmasq before 2.83. A buffer overflow vulnerability was discovered in the way dnsmasq extract names from DNS packets before validating them with...

Linux Distros Unpatched Vulnerability : CVE-2026-93331

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was identified in GPAC 26.08-DEV. This vulnerability affects the function gfrtpparsettxt of the file src/ietf/rtpdepacketizer.c of the component...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000560)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000560 advisory. Use After Free in GitHub repository vim/vim prior to 8.2. Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpq (UTSA-2024-000295)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-000295 advisory. A flaw was found in PostgreSQL involving the pgcancelbackend role that signals background workers, including the logical replication launcher, autovacuum workers, an...

CVE-2026-94492: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in Yonyou U8cloud 5.x. This vulnerability affects unknown code of the file /u8cloud/openapi/so.saleorder.sendaudit of the component OpenAPI. The manipulation of the argument operator leads to sql injection. The attack can be initiated remotely. The explo...

CVE-2026-37603

Improper Restriction of Excessive Authentication Attempts in the administration login of pH7Software pH7Builder pH7 Social Dating CMS through 19.2.0. The CAPTCHA escalation flag is stored in the PHP session as captchaadminenabled and the CAPTCHA form element is only built when that flag is presen...

PT-2026-96857

A vulnerability was found in dgtlmoon changedetection.io up to 50389b07. This vulnerability affects the function add watch ui snapshot of the file changedetectionio/blueprint/add watch ui/ init .py of the component Preview Endpoint. Performing a manipulation of the argument url results in...

PT-2026-97021

Name of the Vulnerable Software and Affected Versions yaml-cpp version 0.9.0 Description A remote attacker can obtain sensitive information through the src/scanner.cpp file, specifically within the Scanner::PopIndent and Scanner::PushIndentTo functions. Recommendations At the moment, there is no...