13283 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-18355
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. In sasliostartpacket, the wrapped-record length read from the...
Exploit for Integer Underflow (Wrap or Wraparound) in Microsoft
No d...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053269)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053269 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Validate pad and ICRC before payloadsize in rxercv rxercv currently checks only that th...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053299)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053299 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: qat - add param check for DH Reject requests with a source buffer that is bigger than the...
Unity Linux 20.1050e / 20.1060e Security Update: kernel (UTSA-2026-085343)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-085343 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: under NFSv4.1, fix double svcxprtput on rpccreate failure On error situation...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053251)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053251 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftflowoffload: reset dst in route object after setting up flow dst is transferred to...
Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: kernel (UTSA-2026-073378)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073378 advisory. In the Linux kernel, the following vulnerability has been resolved: net: garp: fix unsigned integer underflow in garppduparseattr The receive-side GARP attribute...
CVE-2026-67277
RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "random-data=false", the sender transmits an uninitialized tail from a kernel packet buffer. A separate...
CVE-2026-67277 Kernel memory disclosure and denial of service in MikroTik RouterOS btest service
RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "random-data=false", the sender transmits an uninitialized tail from a kernel packet buffer. A separate...
CVE-2026-67277 Kernel memory disclosure and denial of service in MikroTik RouterOS btest service
RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "random-data=false", the sender transmits an uninitialized tail from a kernel packet buffer. A separate...
EUVD-2026-72025
RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "random-data=false", the sender transmits an uninitialized tail from a kernel packet buffer. A separate...
OESA-2026-3649 gstreamer1-plugins-good security update
GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...
SUSE CVE-2026-54345
gopacket provides packet processing capabilities for Go. In version 1.6.0 and earlier, the Diameter AVP decoder computes an AVP data length by subtracting a fixed header size from an attacker-controlled AVP Length field, so a vendor-flagged AVP whose Length is smaller than the 12-byte header...
VulnCheck KEV: CVE-2026-67277
RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "random-data=false", the sender transmits an uninitialized tail from a kernel packet buffer. A separate...
CVE-2026-67277: Missing Authentication for Critical Function
RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "random-data=false", the sender transmits an uninitialized tail from a kernel packet buffer. A separate...
Exploit for CVE-2026-85769
CVE-2026-85769 Heap out-of-bounds read in libtpms TPM 2.0...
CVE-2026-18341
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to corrupt memory due to an integer underflow...
CVE-2026-18341 IBM i is Affected By Buffer Overflow Vulnerability []
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to corrupt memory due to an integer underflow...
CVE-2026-18341
IBM i versions 7.3, 7.4, 7.5, and 7.6 are vulnerable to a heap-based buffer overflow (CWE-122) caused by an integer underflow , allowing a remote authenticated attacker to corrupt memory. IBM rates the vulnerability 6.3 (Medium) with low impact across confidentiality, integrity, and availability,...