SUSE SLED15 / SLES15 Security Update : file-roller (SUSE-SU-2026:4007-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4007-1 advisory. This update for file-roller fixes the following issue: - CVE-2026-78322: stack buffer overflow in parseprogressline for...

EulerOS Virtualization 2.10.0 : libsolv (EulerOS-SA-2026-3871)

According to the versions of the libsolv packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP verification component due to incorrect...

Atlassian Jira Service Management Data Center and Server 10.0.x < 10.3.18 / 10.4.x < 11.3.10 (JSDSERVER-16727)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16727 advisory. - node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.21, node-tar's filesFilter ...

Linux Distros Unpatched Vulnerability : CVE-2026-93579

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Netty's HTTP/2 stack. This vulnerability allows a remote attacker to inject prohibited characters, such as NUL, Line Feed, and Carriage...

EulerOS Virtualization 2.10.0 : libxml2 (EulerOS-SA-2026-3874)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershe...

EulerOS Virtualization 2.10.1 : libxml2 (EulerOS-SA-2026-3840)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libxml2 is vulnerable to multiple stack-based buffer overflows in the xmlcatalog utility when running in --shell mode. The usershe...

CVE-2026-61674: Stack-based Buffer Overflow

Fluent Bit is a fast and lightweight logs, metrics, and traces processor for Linux, BSD, macOS, and Windows. From 0.11.0 until 5.0.8, plugins/outforward/forward.c secureforwardpong copies the server-controlled PONG2 reason into the 32-byte stack buffer msg with memcpy without checking its...

PT-2026-96080

Name of the Vulnerable Software and Affected Versions Neethi versions prior to 3.2.4 Description A specially crafted WS-Policy document containing deeply nested policy elements can bypass the nesting-depth limit. This leads to thread stack exhaustion, which crashes the parser and results in a...

PT-2026-96148

Name of the Vulnerable Software and Affected Versions Fluent Bit versions 0.11.0 through 5.0.7 Description A stack buffer overflow exists in the secure forward pong function within plugins/out forward/forward.c. The issue occurs when the software copies a server-controlled PONG reason into a...

CVE-2026-91863: Uncontrolled Recursion

A specially crafted WS-Policy document with deeply nested policy elements can bypass Neethi's nesting-depth limit and exhaust the thread stack, crashing the parser denial of service. Users are recommended to upgrade to version 3.2.4, which fixes this issue...

Moderate: apr-util security update

The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more. Security Fixes: apr-util: Apache Portable Runtime...

Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability

Zyxel GS1900 series switches contain a stack-based buffer overflow vulnerability in the CGI program which could allow a LAN-based, unauthenticated attacker to exploit the flaw and potentially execute OS commands via a crafted HTTP request...

PT-2026-96115

Name of the Vulnerable Software and Affected Versions fetchmail versions 5.0.8 through 6.6.6 Description A stack-based buffer overflow occurs in fetchmail when it is compiled with NTLM support. A malicious or compromised mail server that advertises NTLM authentication can send a specially crafted...

CVE-2026-94184: Stack-based Buffer Overflow

A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response...

CVE-2026-94184: Stack-based Buffer Overflow

A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response...

Linux Distros Unpatched Vulnerability : CVE-2026-94184

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication c...

PT-2026-105023

A stack-based buffer overflow flaw was found in fetchmail when built with NTLM support. A malicious or compromised mail server advertising NTLM authentication can send a crafted Type 2 challenge that causes fetchmail to write past a fixed stack buffer while building the NTLM authenticate response...

CVE-2026-94089

A vulnerability was determined in D-Link DIR-868L 2.01b05. This issue affects the function strcpy of the file /webfaauthentication.cgi of the component Authentication Handler. Executing a manipulation of the argument id/password can lead to stack-based buffer overflow. The attack can be executed...

CVE-2026-94089

D-Link DIR-868L version 2.01b05 is affected by a stack-based buffer overflow in the strcpy function of the file /webfa_authentication.cgi , within the Authentication Handler component. Remote attackers with no privileges can trigger the overflow by manipulating the id/password argument, leading t...

EUVD-2026-83792

A vulnerability was determined in D-Link DIR-868L 2.01b05. This issue affects the function strcpy of the file /webfaauthentication.cgi of the component Authentication Handler. Executing a manipulation of the argument id/password can lead to stack-based buffer overflow. The attack can be executed...