The vulnerability of the golang-x-image package, a programming language, arises from incorrect calculations, allowing attackers to trigger a service failure.

The vulnerability of the golang-x-image package, a programming language, is related to incorrect calculations. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the secure_popen() function in the Glances monitoring tool glances/secure.py allows a attacker to execute arbitrary commands.

The vulnerability of the securepopen function in the Glances monitoring tool glances/secure.py is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a attacker to execute arbitrary commands...

Linux Distros Unpatched Vulnerability : CVE-2026-93221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: convert nfsdnet boolean flags to unsigned long flags word nfsdnet contains several boolean fields that are accessed from concurrent contexts without...

The vulnerability of the Go programming language, related to the tracking of symbolic references, allows attackers to escalate their privileges.

The vulnerability of the Go programming language is related to the tracking of symbolic references. Exploiting this vulnerability can allow attackers to enhance their privileges...

Linux Distros Unpatched Vulnerability : CVE-2026-88837

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BusyBox httpd treats yescrypt $y$ password hashes as plaintext during Basic Authentication, inverting the authentication check. CVE-2026-88837 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2026-93216

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/pageowner: use memcgdata snapshot to avoid TOCTOU in printpageownermemcg printpageownermemcg reads page-memcgdata via READONCE at the start to guard against...

The vulnerability of the Linux operating system’s kernel, related to the implementation of incorrect control flow, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel, which stems from the inability to release resources after their useful lifespan has ended, allows attackers to trigger service failures.

The vulnerability of the Linux operating system’s kernel is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause service failures through specially created IPv6 traffic...

The vulnerability of the BuildKit container-building software lies in its ability to distribute resources indefinitely, allowing a hacker to cause service failures.

The vulnerability of the BuildKit container-building software lies in its ability to distribute resources indefinitely. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

CVE-2026-98044

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject legacy packet loads from callbacks checkldabs models a failed BPFLDABS or BPFLDIND in a subprogram as an implicit return with R0 set to zero. It calls preparefuncexit to explore this synthesized path. When the load is...

Linux Distros Unpatched Vulnerability : CVE-2026-93249

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: amlogic-spisg: Make sure clkinitdata is fully initialized The clkinitdata structure contains several mutually-exclusive members for different methods to...

The vulnerability of the Reporting component of the Kibana data visualization service allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Reporting component of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Python programming language’s pip module allows attackers to gain unauthorized access to protected information.

The vulnerability of the Python programming language’s pip module is related to incorrect pathname restrictions for directories. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Linux Distros Unpatched Vulnerability : CVE-2026-93217

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/madvise: skip device-private PMDs in cold and pageout walks madvisecoldorpageoutpterange takes pmdtranshugelock, whose pmdishuge check returns true for a...

The vulnerability of the mechanism for processing descriptions of node disconnection reasons in Jenkins automation allows a perpetrator to execute arbitrary code.

The vulnerability of the mechanism for processing descriptions of node disconnection reasons in Jenkins automation is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary co...

Linux Distros Unpatched Vulnerability : CVE-2026-93215

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cdx: Fix double free when sysfs file creation fails In cdxcreateresattr, if sysfscreatebinfile fails, the code frees resattr but doesn't set cdxdev-resattrnum t...

The vulnerability of the Erlang/OTP software platform, related to the redirection of URLs to unreliable websites, allows a hacker to redirect users to arbitrary URL addresses.

The vulnerability of the Erlang/OTP software platform is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to redirect users to any given URL address...

The vulnerability of the Vim text editor, related to the use of an incomplete black list, allows a hacker to execute arbitrary code.

The vulnerability of the Vim text editor is related to the use of an incomplete black list. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Perl-Crypt-DSA digital signature package relates to the number of surfaces that are subject to attacks, with their quantitative measure exceeding the desired maximum. This allows attackers to compromise the confidentiality of the protected information.

The vulnerability of the Perl-Crypt-DSA digital signature package relates to the surface area of the attack, whose quantitative measure exceeds the desired maximum. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality of the protected information...

The vulnerability of the ldapQueryPassword parameter processing mechanism in the MongoDB database management system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the ldapQueryPassword parameter processing mechanism in the MongoDB database management system is related to the disclosure of information through registration files. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...