CVE-2026-51907

A path traversal vulnerability exists in TaskingAI v0.3.0 within the QR Code Generator plugin . Specifically, the save_base64_image function fails to properly sanitize the project_id parameter, allowing an attacker to write image files to arbitrary locations on the server filesystem. While exploi...

CVE-2026-103628: Out-of-bounds Write

Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-82459: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound, Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

Siemens SIMATIC S7-1500 CPU 1518 MFP Write-what-where Condition (CVE-2026-46323)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505968; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...

openSUSE 16: helm / helm-bash-completion / helm-fish-completion / etc (openSUSE-SU-2026:21983-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21983-1 advisory. - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGSMAXFRAMESIZE bsc1265758. - CVE-2026-35204:...

Siemens SIMATIC S7-1500 CPU 1518 MFP Out-of-bounds Write (CVE-2026-53002)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid506018; scriptversion"1.2"; scriptsetattributeattribute:"pluginmodificationdate",...

Linux Distros Unpatched Vulnerability : CVE-2026-59685

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while processing paths with 8.3 names that may grow when expanded. This issue affects Apache...

SUSE SLED15 / SLES15 Security Update : gdb (SUSE-SU-2026:4400-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4400-1 advisory. This update for gdb fixes the following issue: - CVE-2026-13732: Out-of-bounds write in STABS parser readmemberfunction...

SUSE SLES15 Security Update : python-pymongo (SUSE-SU-2026:4398-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4398-1 advisory. - CVE-2026-96747: improper handling of key management endpoint values ending in .sock allows users with write access to the encryption key...

openSUSE 16 Security Update : chromium (openSUSE-SU-2026:21987-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21987-1 advisory. Changes in chromium: - Chromium 154.0.8037.57 boo1282334: CVE-2026-95350: Buffer overflow in ANGLE CVE-2026-95357: Out of bounds write in GPU...

Linux Distros Unpatched Vulnerability : CVE-2026-56449

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds Write vulnerability in Apache HTTP Server's modproxyhtml with crafted HTTP response bodies. This issue affects Apache HTTP Server: from 2.4.0...

Linux Distros Unpatched Vulnerability : CVE-2026-56153

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds Write vulnerability in Apache HTTP Server's modcharsetlite. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68. CVE-2026-56153 Note...

Rocky Linux 9.6 [TuxCare] Security Update: rsync / rsync-daemon / rsync-rrsync Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1790925399)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1790925399 advisory. - rsync before 3.5.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability in the rrsync restricted shell...

PCRE2 Heap Buffer Overflow DoS

The vulnerability of the PCRE2 regular expression library is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to write arbitrary files...

FortiMail Graphical Interface Arbitrary File Write

The vulnerability of the FortiMail email protection system’s graphical interface is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability allows a malicious actor to write arbitrary files using specially crafted HTTP requests...

Linux Distros Unpatched Vulnerability : CVE-2026-103484

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution. CVE-2026-103484 Not...

RockyLinux 9 : libpcap (RLSA-2026:74441)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:74441 advisory. libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access CVE-2026-0799 Tenable has extracted the preceding description block...

CVE-2026-104201

GHSA-wj29-mxmc-q98c: Heap OOB read/write in MS-MPPE key re-encryption...

CVE-2026-51907: Improper Limitation of a Pathname to a Restricted Directory

In TaskingAI v0.3.0 in the QR Code Generator plugin savebase64image function, a path traversal vulnerability allows attackers to write image files to arbitrary locations on the server filesystem by manipulating the projectid parameter...

Important: Red Hat Security Advisory: libpcap security update

An update for libpcap is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...