CVE-2025-61029

A flaw was found in virtuoso-opensource. A remote attacker could exploit this vulnerability by sending specially crafted SQL statements to the sqlountry component. This could lead to a Denial of Service DoS, making the service unavailable to legitimate users...

CVE-2026-67261

Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contains an OS Command Injection vulnerability in the IAPI component. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the...

CVE-2026-64993

Dell RVTools before 4.8.1 contains an improper certificate validation vulnerability in the collector. A remote unauthenticated attacker could exploit this to impact confidentiality and integrity. Impact is described as high for confidentiality and integrity; attack vector is network with no user ...

CVE-2026-53689

A flaw was found in libnfs. A remote attacker could exploit a vulnerability related to improper string size validation when a user connects to a specially crafted Network File System NFS server. This could lead to an integer overflow, potentially allowing for information disclosure, data...

CVE-2026-69185

A flaw was found in Socket.IO. A remote attacker could send a specially crafted packet that causes the server to buffer a large number of binary attachments. This can lead to the server running out of memory, resulting in a denial of service DoS...

CVE-2026-64194

A flaw was found in Net::DNS. A remote attacker can exploit this vulnerability by sending a specially crafted DNS packet with deep compression pointer chains. This can cause excessive recursion in the Net::DNS::DomainName::decode function, leading to stack exhaustion and a Denial of Service DoS f...

SUSE-SU-2026:3516-1 Security update for openssl-3

This update for openssl-3 fixes the following issue - HollowByte: DoS vector against OpenSSL TLS ClientHello via remote, attacker-controlled memory allocations bsc1271712...

postfix: buffer over-read via malformed enhanced status code

A flaw was found in Postfix. This issue occurs when processing enhanced status codes, specifically an enhanced status code that lacks text following the third number. Depending on the configuration of the server, this allows a remote attacker to cause a buffer over-read of only 1 byte, leading to...

postfix: buffer over-read via malformed enhanced status code

A flaw was found in Postfix. This issue occurs when processing enhanced status codes, specifically an enhanced status code that lacks text following the third number. Depending on the configuration of the server, this allows a remote attacker to cause a buffer over-read of only 1 byte, leading to...

postfix: buffer over-read via malformed enhanced status code

A flaw was found in Postfix. This issue occurs when processing enhanced status codes, specifically an enhanced status code that lacks text following the third number. Depending on the configuration of the server, this allows a remote attacker to cause a buffer over-read of only 1 byte, leading to...

SUSE CVE-2026-67182

Rouille 0.3.3 through 3.6.2 contains an HTTP request smuggling vulnerability that allows remote attackers to bypass access controls by injecting bare line feed characters 0x0A into client-supplied request header values that are copied verbatim to upstream connections without validation. Attackers...

EUVD-2026-53680

An issue in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the event monitored-item queue resize handling...

EUVD-2026-53679

Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the AddNodes, addressspacebs.c, sopcnodemgthelperinternal.c, and toolkittestserver...

CVE-2026-67870

In open62541 v1.5.5, the server-side AddReferences implementation contains an incomplete validation flaw for non-local ExpandedNodeId targets. A remote attacker can send a crafted AddReferencesRequest with an empty targetServerUri and a non-zero targetNodeId.serverIndex, causing the target node...

CVE-2026-67869: Buffer Copy without Checking Size of Input

Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the ServiceCall validates input arguments against runtime-resolved InputArguments metadata...

ROS-20260806-73-0013

The vulnerability of the teeshmput function in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

CVE-2026-19161: Use of Uninitialized Variable

Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-19175: Use After Free

Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

ROS-20260806-73-0009

The vulnerability of the smcibissgneedsync function in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

ROS-20260806-73-0008

The vulnerability of the listfirstentry function in the Linux operating system’s kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...