270244 matches found
RockyLinux 10 : freerdp (RLSA-2026:54486)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:54486 advisory. FreeRDP: FreeRDP: Remote code execution or denial of service via heap-based buffer overflow CVE-2026-64620 FreeRDP: FreeRDP: Double-free vulnerability...
ALSA-2026:54485 Important: freerdp security update
FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files...
RHEL 9 : freerdp (RHSA-2026:54487)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:54487 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...
Security Updates for Microsoft Excel Products C2R (August 2026)
The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Access of resource using incompatible type 'type confusion' in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. CVE-2026-65807 - Heap-based...
Security Updates for Microsoft Outlook Products C2R (August 2026)
The Microsoft Outlook Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network. CVE-2026-70329 - Heap-based buffer overflow in Microsof...
KLA91224 Multiple vulnerabilities in PostgreSQL
Multiple vulnerabilities were found in PostgreSQL. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Security vulnerability can be exploited to bypass...
PT-2026-71504
Unauthenticated Remote Code Execution RCE in QA Analytics = 5.2.0.0 versions...
Webmin Help Template Authenticated Remote Code Execution
Webmin's help system accepts template variables via query parameters and processes them through the eval function. This allows an authenticated user to execute commands with root privileges. Versions prior to 2.640 appear to be affected. Webmin Help Template Authenticated Remote Code Execution...
PT-2026-71705
Name of the Vulnerable Software and Affected Versions CyberPanel versions prior to 3.0.0 Description The WebTerminal FastAPI SSH service contains a hard-coded JSON Web Token JWT secret. This allows unauthenticated remote attackers to forge valid authentication tokens by signing them with the...
Linux Distros Unpatched Vulnerability : CVE-2026-53783
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability in the rrsync restricted shell wrapper that allows authenticated...
Linux Distros Unpatched Vulnerability : CVE-2026-48553
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 are vulnerable to authenticated remote code execution via custom-variable macro injection through the...
RHEL 8 : freerdp (RHSA-2026:54485)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:54485 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...
PT-2026-71842
Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Improper authentication may allow a remote attacker to execute arbitrary code or obtain sensitive information. Recommendations At the moment, there is no information about a newer version that contain...
ROS-20260813-73-0005
The vulnerability in Gitea is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
RHEL 10 : freerdp (RHSA-2026:54486)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:54486 advisory. FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to...
AlmaLinux 8 : freerdp (ALSA-2026:54485)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:54485 advisory. FreeRDP: FreeRDP: Arbitrary code execution via malicious RDP files CVE-2026-64624 FreeRDP: FreeRDP: Denial of Service via crafted WindowIcon async messag...
PT-2026-71486
WebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry. Versions 1.19 and prior allow any self-registered user to upload arbitrary PHP files through the HR Expense scan file parameter, leading to Remote Code Execution. Combined with open registration no invite...
PT-2026-71497
Editor PHP Object Injection in Car Rental Manager = 1.3.9 versions...
PT-2026-71676
Name of the Vulnerable Software and Affected Versions Zimbra Collaboration Suite versions prior to 10.1.20 Description An OS command injection flaw exists in the SNMP monitoring functionality of the Zimbra Collaboration Suite. The issue occurs when the optional zimbra-snmp package is installed,...
PT-2026-71481
Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description A type confusion issue exists in the portal and cursor...