Linux Distros Unpatched Vulnerability : CVE-2026-98410

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - watchdog: da9063: fix suspend/resume handling of HWRUNNING watchdog da9063wdtsuspend and da9063wdtresume only check watchdogactive, when the watchdog is left...

PT-2026-113700

Koha is vulnerable to OS command injection in the Task Scheduler deletion path. The tools/scheduler.pl handler accepts the jobid request parameter for op=cud-delete and passes it to C4::Scheduler::remove at job without validating it. Schedule::At::remove substitutes the supplied job ID into an at...

PT-2026-114074

Name of the Vulnerable Software and Affected Versions MyReport Updater versions prior to 2.1.2 Description An unauthenticated gRPC service is exposed on TCP port 9095, allowing remote attackers to redirect the SYSTEM updater. This is achieved by invoking the UpdateConfigReferent method. Attackers...

ROS-20261014-73-0057

The vulnerability of the vcnv40decmsg function in the drivers/gpu/drm/amd/amdgpu/vcnv40.c driver for AMD GPU cores in Linux’s Direct Rendering Infrastructure DRI kernel relates to buffer overflow attacks. Exploiting this vulnerability can allow attackers to access protected information or cause...

CVE-2026-107153: Use of Weak Credentials

Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot AVB functionality. With physical access to the affected device, a crafted system image may be installed...

PT-2026-114389

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the suspend and resume handling of the da9063 watchdog. The functions da9063 wdt suspend and da9063 wdt resume only verify watchdog active. If the driver sets WDOG HW...

CVE-2026-98410

In the Linux kernel, the following vulnerability has been resolved: watchdog: da9063: fix suspend/resume handling of HWRUNNING watchdog da9063wdtsuspend and da9063wdtresume only check watchdogactive, when the watchdog is left running by the driver sets WDOGHWRUNNING in da9063wdtprobe but userspac...

VulnCheck KEV: CVE-2026-106931

SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product...

PT-2026-113649

A use-after-free exists in the Windows WFP packet-capture driver shipped with Akamai Guardicore Platform Agent GPA before 7.4. When an IPv6 proxy/redirect rule is active, a local attacker with Administrator privileges can send a single crafted outbound IPv6 packet via a raw IPV6 HDRINCL socket to...

CVE-2026-106931: Improper Neutralization of Special Elements used in an OS Command

SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privileges on the system running the affected product...

Copeland XWEB and XWEB Pro Improper Neutralization of Special Elements Used in an OS Command (CVE-2026-20764)

An OS Command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by providing malicious input via the device hostname configuration which is later processed during system setup, resulting in remote...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-8919-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8919-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...

PT-2026-114145

FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in drive process irp create, which registers an opened local file in the drive dictionary before applying the allocation size and does not remove it when that operation fails. A malicious RDP server connected to a client with...

PT-2026-113640

Name of the Vulnerable Software and Affected Versions SiteGuard Server Edition versions 2.20 through 8.00 Update4 Description An OS command injection flaw exists in the statistics feature, which is enabled by default. This issue allows an attacker with local access and a low-privileged account to...

PT-2026-113726

A vulnerability in HPE NonStop iTP WebServer can cause memory corruption and system shutdown...

SonicWALL Global Management System (GMS) < 9.4 Multiple Vulnerabilities (SNWLID-2024-0007)

The version of SonicWALL Global Management System GMS running on the remote host is prior to 9.4. It is, therefore, affected by multiple vulnerabilities: - The XML document processed in the GMS ECM URL endpoint is vulnerable to XML external entity XXE injection, potentially resulting in the...

CVE-2026-50215

The Akamai Guardicore Platform Agent (GPA) shipped before version 7.4 contains a use-after-free vulnerability in the Windows WFP packet-capture driver. When an IPv6 proxy/redirect rule is active, a local attacker with Administrator privileges can trigger this flaw at DISPATCH_LEVEL by sending a s...

Ubuntu 26.04 LTS : Linux kernel (Azure) vulnerabilities (USN-8888-1)

"The remote Ubuntu 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8888-1 advisory. It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local...

Ubuntu 24.04 LTS : Linux kernel (Azure) vulnerabilities (USN-8918-1)

"The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8918-1 advisory. It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local...

Exploit-CVE-2014-4113

Exploit-CVE-2014-4113 CVE-2014-4113 is a Local & Privilege Escalation Exploits. You can get the SYSTEM Privilege. support platform: x86; windows xp and windowx 7 usage: 1. cmd.exeлǰĿ¼ִ cve-2014-4113.exe target program name for example: cve-2014-4113.exe calc.exe...