The vulnerability of the Apache Tomcat application server, related to insufficient input validation, allows attackers to execute arbitrary code.

The vulnerability of the Apache Tomcat application server is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the f81604_read_int_callback() function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to improper validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: mozjs78 (UTSA-2024-003380)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2024-003380 advisory. xmltokimpl.c in Expat aka libexpat before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: postgresql (UTSA-2026-099465)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099465 advisory. Improper validation of type oidvector in PostgreSQL allows a database user to disclose a few bytes of server memory. We have not ruled out viability of attacks that...

Unity Linux 20.1070e Security Update: gvfs (UTSA-2026-099541)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099541 advisory. A flaw was found in the FTP GVfs backend. A remote attacker could exploit this input validation vulnerability by supplying specially crafted file paths containing...

PT-2026-76841

The issue was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

The vulnerability of the nft_set_rbtree.c component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nftsetrbtree.c component in the Linux operating system is related to incorrect checks for consistency in input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-73267

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...

PT-2026-76676

A vulnerability has been found in jae-jae fetcher-mcp up to 0.3.9. Impacted is the function fetch url/fetch urls of the file /latest/meta-data/iam/security-credentials/ of the component URL Validation. Such manipulation leads to server-side request forgery. It is possible to launch the attack...

The vulnerability in the `drivers/net/usb/pegasus.c` component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/net/usb/pegasus.c component of the Linux operating system is related to insufficient checking of the type of input data provided. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100567)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100567 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd Two latent bugs in...

Important: unbound security update

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver. Security Fixes: unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes CVE-2026-44690 For more details about the security issues, including the impact, a CVSS...

Important: bind9.18 security update

BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP addresses; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server ...

.NET: .NET Denial of Service Vulnerability

Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-19955

A vulnerability was detected in TrailDB 0.6. Impacted is the function tdbopen of the file /src/tdb.c of the component TOC Validation. The manipulation results in out-of-bounds read. It is possible to launch the attack remotely. The exploit is now public and may be used. The project was informed o...

CVE-2026-19955

CVE-2026-19955 affects TrailDB 0.6. The vulnerability is in the function tdb_open in /src/tdb.c (TOC Validation), causing an out-of-bounds read. Remote exploitation is possible and public exploits exist. The project was informed via an issue report but has not responded. No remediation details ar...

CVE-2026-19955 TrailDB TOC Validation tdb.c tdb_open out-of-bounds

A vulnerability was detected in TrailDB 0.6. Impacted is the function tdbopen of the file /src/tdb.c of the component TOC Validation. The manipulation results in out-of-bounds read. It is possible to launch the attack remotely. The exploit is now public and may be used. The project was informed o...

EUVD-2026-59991

A vulnerability was detected in TrailDB 0.6. Impacted is the function tdbopen of the file /src/tdb.c of the component TOC Validation. The manipulation results in out-of-bounds read. It is possible to launch the attack remotely. The exploit is now public and may be used. The project was informed o...

CVE-2026-19955

A vulnerability was detected in TrailDB 0.6. Impacted is the function tdbopen of the file /src/tdb.c of the component TOC Validation. The manipulation results in out-of-bounds read. It is possible to launch the attack remotely. The exploit is now public and may be used. The project was informed o...

CVE-2026-19955 TrailDB TOC Validation tdb.c tdb_open out-of-bounds

A vulnerability was detected in TrailDB 0.6. Impacted is the function tdbopen of the file /src/tdb.c of the component TOC Validation. The manipulation results in out-of-bounds read. It is possible to launch the attack remotely. The exploit is now public and may be used. The project was informed o...