Erlang/OTP Stack Buffer Overflow

The vulnerability of the Erlang/OTP software platform is related to overflowing buffers in the stack. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

CVE-2026-97965

In the Linux kernel, the following vulnerability has been resolved: vxlan: initialize md in vxlanxmitone If a VXLAN device is configured with both VXLANFCOLLECTMETADATA and VXLANFGBP, and a packet is transmitted through it using an external iptunnelinfo that lacks the IPTUNNELVXLANOPTBIT flag, md...

openSUSE 16: freeipmi / freeipmi-bmc-watchdog / freeipmi-devel / etc (openSUSE-SU-2026:21883-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21883-1 advisory. - CVE-2026-85504: stack-based buffer overflow via malformed Fujitsu SEL long-text responses bsc1278719. - CVE-2026-85505: Denial of Service via...

Adobe Bridge 15.1.7 < 15.1.8 / 16.x < 16.0.7 Multiple Vulnerabilities (APSB26-148)

The version of Adobe Bridge installed on the remote Windows host is prior to 15.1.8 or 16.0.7. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb26-148 advisory. - Bridge is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code...

PT-2026-98708

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Faultable variants of the functions bpf get stack and bpf get task stack pass may fault=true into common stack collection code. This process can trigger build id parse file when resolvin...

CVE-2026-98031

In the Linux kernel, the following vulnerability has been resolved: nexthop: Initialize extack in removenhgrpentry removenhgrpentry prints the extack message when a listener fails to replace the reduced nexthop group. However, extack is not initialized and listeners are not required to set a...

PT-2026-98770

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth L2CAP implementation where l2cap le connect req fails to correctly set the channel mode, leaving it at the default value set by l2cap new connection. Thi...

CVE-2026-98031: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: nexthop: Initialize extack in removenhgrpentry removenhgrpentry prints the extack message when a listener fails to replace the reduced nexthop group. However, extack is not initialized and listeners are not required to set a...

Vim Buffer Overflow

The vulnerability of the Vim text editor is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

libssh Stack Buffer Overflow RCE

The vulnerability of the libssh library is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

PT-2026-99016

rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occur. Attackers can trigger panics to leak internal file paths, module versions, goroutine states, and memory addresses...

PT-2026-98598

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Memory corruption occurs in the tracing subsystem when using a STACKTRACE histogram key. The parse field function maps generic fields like STACKTRACE to common equivalents but returns a...

CVE-2026-97554: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid using uninitialized SIDs in cifsposixtofattr cifsposixtofattr ignores the return value of posixinfoparse. When a malformed POSIX directory entry is encountered e.g. invalid SID lengths from an untrusted server,...

PT-2026-98494

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client where the cifs posix to fattr function ignores the return value of posix info parse. When an untrusted server provides a malformed POSIX directory entry...

LibreOffice < 26.2.5 Multiple Vulnerabilities

The version of LibreOffice installed on the remote host is prior to 26.2.5. It is, therefore, affected by multiple vulnerabilities: - LibreOffice Draw can import PDF documents. A heap buffer overflow existed when importing an encrypted document. The length of the decryption key was taken from the...

Linux Distros Unpatched Vulnerability : CVE-2026-97621

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: analogixdp: fix unchecked bound endpoint name length rockchipdpdrmencoderenabl...

Linux Distros Unpatched Vulnerability : CVE-2026-97554

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: avoid using uninitialized SIDs in cifsposixtofattr cifsposixtofattr ignores the return value of posixinfoparse. When a malformed POSIX directory...

PT-2026-98629

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the VXLAN implementation where the md stack variable is not initialized in the vxlan xmit one function. When a VXLAN device is configured with both VXLAN F COLLECT...

Oracle Linux 8 : perl-DBI:1.641 (ELSA-2026-69112)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-69112 advisory. - Fix placeholder limit on :N and :pN style placeholders CVE-2026-73194 Resolves: RHEL-247869 - Fix unsafe string eval in DBI::Profile CVE-2026-14380 Resolves:...

SUSE CVE-2026-88359

libfyaml 0.9.6 contains a stack exhaustion vulnerability in fyatomiterformat. When processing a specially crafted YAML document containing a very large literal or folded block scalar, the function repeatedly grows an internal buffer using alloca inside a loop. The allocated stack memory is not...