SUSE CVE-2026-68516

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. From version 3.4.0 through 3.4.13, a crafted HTJ2K-compressed EXR can crash OpenEXR during normal decode. An HTJ2K-compressed EXR whose JPEG 2000 SIZ fields place the...

SUSE CVE-2026-78322

A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller's progress-line parsing copies the path into a fixed-size stack buffer using an unbounded string copy. This can trigger a stack buffer...

EUVD-2026-66196

A security vulnerability has been detected in TOTOLINK N600R 4.3.0cu.7647B20210106. The affected element is the function setSystemConfig of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument Hostname leads to stack-based buffer overflow. It is possible t...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: hivex (UTSA-2026-093163)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093163 advisory. A flaw was found in the hivex library. This flaw allows an attacker to input a specially crafted Windows Registry hive file, which would cause hivex to recursively...

Linux Distros Unpatched Vulnerability : CVE-2026-75421

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - aria2 =1.37.0 has a stack-buffer-underflow vulnerability in the IOFile::getLine function. CVE-2026-75421 Note that Nessus relies on the presence of the package ...

PT-2026-82089

A stack-based buffer overflow vulnerability exists in the Dia diagram editor when processing Network Bus objects from Dia XML project files. In objects/network/bus.c, bus load reads the number of bus handles from the file attribute "bus handles" using attribute num data without validating an uppe...

CVE-2026-21807: Stack-based Buffer Overflow

HCL BigFix Quantum Risk Analyzer binary lacks several critical, industry-standard hardening protections that could allow an attacker to cause a stack-based buffer overflow...

CVE-2026-68863: Stack-based Buffer Overflow

Dell PowerProtect One, versions 20.1.0.0 and below, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...

CVE-2026-79902: Integer Overflow or Wraparound

A flaw was found in the Seattle FilmWorks plugin in GIMP. When processing a specially crafted SFW image file, the plugin allocates a Variable-Length Array VLA on the stack without integer overflow checks, causing an unbounded stack allocation. This issue leads to an application crash, resulting i...

CVE-2026-77658: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability exists in the Dia diagram editor when processing Network Bus objects from Dia XML project files. In objects/network/bus.c, busload reads the number of bus handles from the file attribute "bushandles" using attributenumdata without validating an upper...

PT-2026-82104

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw in the Seattle FilmWorks plugin occurs when processing a specially crafted SFW image file. The plugin allocates a Variable-Length Array VLA—an array whose size is determined at runtime—on...

PT-2026-82329

Name of the Vulnerable Software and Affected Versions HCL BigFix Quantum Risk Analyzer affected versions not specified Description The binary lacks several critical, industry-standard hardening protections, which could allow an attacker to cause a stack-based buffer overflow. A stack-based buffer...

PT-2026-82255

Dell PowerProtect One, versions 20.1.0.0 and below, contain a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: tmux (UTSA-2024-005632)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-005632 advisory. In tmux before version 3.1c the function inputcsidispatchsgrcolon in file input.c contained a stack- based buffer-overflow that can be exploited by terminal output...

Linux Distros Unpatched Vulnerability : CVE-2026-79902

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Seattle FilmWorks plugin in GIMP. When processing a specially crafted SFW image file, the plugin allocates a Variable-Length Array VLA o...

Linux Distros Unpatched Vulnerability : CVE-2026-77658

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack-based buffer overflow vulnerability exists in the Dia diagram editor when processing Network Bus objects from Dia XML project files. In...

Linux Distros Unpatched Vulnerability : CVE-2026-79777

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, modul...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libproxy (UTSA-2026-093632)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093632 advisory. url::recvline in url.cpp in libproxy 0.4.x through 0.4.15 allows a remote HTTP server to trigger uncontrolled recursion via a response composed of an infinite stream...

MiracleLinux 8 : 389-ds:1.4 (AXSA:2026-1661:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1661:01 advisory. 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check CVE-2026-11770 389-ds-base: 389-ds-base: NULL pointer dereferen...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098774)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098774 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftct: bail out on template ct in get eval I noticed this issue while looking at a...