openSUSE 16: libp11-kit0 / p11-kit / p11-kit-devel / p11-kit-nss-trust / etc (openSUSE-SU-2026:22105-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22105-1 advisory. - CVE-2026-13757: Stack exhaustion via unbounded recursion in RPC attribute parsing bsc1269664. - CVE-2026-18938: integer overflow in RPC...

PT-2026-117685

Name of the Vulnerable Software and Affected Versions Pillow versions 9.1.0 through 12.x Description Pillow can disclose uninitialized stack memory when the Image.quantize function uses an empty palette. This occurs because the ImagingPaletteCacheUpdate function leaves a local cache array...

CVE-2026-12665: Stack-based Buffer Overflow

IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malformed distinguished names during channel connection establishment...

CVE-2026-112368: Uncontrolled Recursion

An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data to the decoder to exhaust the process stack. This may cause the PHP process using the driver to terminate unexpectedly, resulting ...

CVE-2026-84180: Generation of Error Message Containing Sensitive Information

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Knative component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When processing of an exchange failed on the consumer side, the Knative HTTP consumer wrote the...

Microsoft Office 2016 Equation Editor Memory Corruption

Microsoft Office versions 2007 SP3 through 2016 contain a stack-based buffer overflow in Equation Editor. This analysis describes the vulnerability, attack chain, patches, and mitigations...

PT-2026-117425

libaribb24 aribb24 through 1.0.3 contains a stack-based buffer overflow vulnerability in decoder handle csi in src/decoder.c that allows attackers to write past a fixed 256-entry array by supplying unbounded CSI parameter bytes. Attackers can embed a caption statement with a CSI introducer and ov...

PT-2026-117512

Name of the Vulnerable Software and Affected Versions IBM MQ affected versions not specified Description A stack buffer overflow occurs during channel connection establishment when processing TLS certificates containing malformed distinguished names. This flaw allows a remote attacker to execute...

PT-2026-117697

A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub 416874 of the file /usr/bin/usrlist. Such manipulation leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be...

Linux Distros Unpatched Vulnerability : CVE-2026-96956

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network. CVE-2026-96956 Note that Nessus relies on the...

PT-2026-117354

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CXF component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When a route behind a CXF SOAP consumer failed with an exception the service contract does not declare, t...

CVE-2026-8168: Uncontrolled Recursion

Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module QtSvg in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted SVG file with deeply nested elements...

PT-2026-117537

Name of the Vulnerable Software and Affected Versions Tapo C320WS V2.0 Description An authenticated stack-based buffer overflow exists in the local onboarding Wi-Fi configuration path. An attacker on the adjacent network can submit a crafted request containing an oversized encrypted password fiel...

TP-Link Tapo C320WS v2 buffer error vulnerability

The TP-Link Tapo C320WS v2 running firmware versions prior to 1.6.6 Build 260917 Rel.81089n contain a buffer error vulnerability. This vulnerability arises from an authenticated stack buffer overflow in the local Wi-Fi configuration path. Authenticated attackers on adjacent networks can submit...

MiracleLinux 9 : libreoffice-7.1.8.1-15.el9_8.3.ML.1 (AXSA:2026-2082:05)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2082:05 advisory. libreoffice: heap buffer overflow in PDF import stream handling CVE-2026-63274 libreoffice: stack buffer overflow in CFF to Type 1 font conversion...

PT-2026-117473

Name of the Vulnerable Software and Affected Versions MongoDB PHP driver affected versions not specified Description An uncontrolled recursion weakness exists in the BSON decoding logic. An unauthenticated party can supply crafted binary document data to the decoder to exhaust the process stack...

Linux Distros Unpatched Vulnerability : CVE-2026-112063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAMHi that allows malicious XMPP servers to overflow a 128-byte stack buffer...

Linux Distros Unpatched Vulnerability : CVE-2026-112055

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wvWare wv through 1.2.9 contains a stack-based out-of-bounds read vulnerability in wvGetPAPXFKP and wvGetCHPXFKP caused by an unvalidated FKP run count. Attacke...

Linux Distros Unpatched Vulnerability : CVE-2026-98528

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpio: cdev: fix kernel stack leak to user-space in error path If we fail to acquire the GPIO chip guard in gpiodesctolineinfo, we return immediately before...

PT-2026-117343

Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Knative component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When processing of an exchange failed on the consumer side, the Knative HTTP consumer wrote the...