368122 matches found
EulerOS Virtualization 2.11.0 : samba (EulerOS-SA-2026-3558)
According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Upstream Security Advisories: https://www.samba.org/samba/security/CVE-2007-2447.html...
MiracleLinux 9 : libsoup-2.72.0-16.el9_8.3 (AXSA:2026-1872:12)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1872:12 advisory. SoupWebsocketExtensionDeflate: libsoup: libsoup: WebSocket permessage-deflate Unbounded Decompression Remote Denial of Service CVE-2026-15709 libsou...
Linux Distros Unpatched Vulnerability : CVE-2026-90313
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf, cgroup: Fix invalid storage access after cgroupbpfattach failed A potential invalid storage access issue can occur after replacing a cgroup bpf prog. This...
Linux Distros Unpatched Vulnerability : CVE-2026-92486
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix CFI mismatch in task work callback BPF subprograms use the bpfcallbackt ABI, but task work invokes the callback through a three-argument function...
Linux Distros Unpatched Vulnerability : CVE-2026-90364
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ACPI: processor: Unregister cpufreq notifier on init failure acpiprocessordriverinit registers the cpufreq policy notifier before registering the ACPI processor...
Linux Distros Unpatched Vulnerability : CVE-2026-92485
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix WARNING in bpftracinglinkrelease The trampoline could be corrupted by the blindly 'tr-flags = BPFTRAMPFTAILCALLCTX' in verifier. 1. A fexit attached to...
EulerOS Virtualization 2.11.1 : autogen (EulerOS-SA-2026-3400)
According to the versions of the autogen package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability, which was classified as problematic, was found in GNU libopts up to 27.6. Affected is the function strstrsse2. The...
Linux Distros Unpatched Vulnerability : CVE-2026-93183
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/lima: call drmmminit with a valid allocation range limavmcreate is currently run before vastart and vaend are set up, meaning they are both 0. limavmcreate...
EulerOS Virtualization 2.11.1 : libgcrypt (EulerOS-SA-2026-3428)
According to the versions of the libgcrypt packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to...
Linux Distros Unpatched Vulnerability : CVE-2026-93055
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UDF symlink pathComponent header OOB read udfsymlinkfiller can enter udfpctochar with a partial pathComponent header. Validate that enough input remains for a...
Linux Distros Unpatched Vulnerability : CVE-2026-90338
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: amba-pl011: keep console clock enabled for atomic writes pl011consolewriteatomic runs from nbcon atomic context, where sleeping is not allowed. It calls...
Linux Distros Unpatched Vulnerability : CVE-2026-90395
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - power: supply: isp1704charger: cancel work on remove The USB notifier and initial VBUS detection can schedule isp-work. The remove path unregisters the notifier...
Linux Distros Unpatched Vulnerability : CVE-2026-93041
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dmaengine: dw-edma: Serialize abort state updates dwedmaabortinterrupt drops vc.lock before changing request and status. issuepending can acquire the lock in th...
Parallels Desktop < 27.0.0 Local Privilege Escalation (macOS)
The version of Parallels Desktop installed on the remote macOS host is prior to 27.0.0. It is, therefore, affected by a privilege escalation vulnerability: - Parallels Desktop runs prldispservice as root. Local clients reach it on the world-writable socket /var/run/prldispservice.socket...
Linux Distros Unpatched Vulnerability : CVE-2026-90239
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: media: amd: isp4: release partial allocations in isp4ifallocfwgpumem isp4ifallocfwgpumem...
Linux Distros Unpatched Vulnerability : CVE-2026-93148
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Reject MEMALLOC BTF accesses past object bounds BTF struct walks relax the struct-size check for accesses through a trailing flexible array. That is valid...
Linux Distros Unpatched Vulnerability : CVE-2026-90409
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/panthor: Add vmbind region with kbo range overlap check When a VM is created, caller has to specify the range of the address space carve-out set aside for...
Linux Distros Unpatched Vulnerability : CVE-2026-93051
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - misc: ad525xdpot: use driver core groups for sysfs files addpotprobe creates per-RDAC sysfs files manually and then optionally creates the command sysfs group...
EulerOS Virtualization 2.11.1 : libsodium (EulerOS-SA-2026-3431)
According to the versions of the libsodium package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to...
Cisco Secure Firewall Management Center Software sftunnel Authentication Bypass (cisco-sa-fmcftd-sftun-multivulns-WGVHOrN3)
According to its self-reported version, Cisco Secure Firewall Management Center FMC is affected by multiple vulnerabilities. - A denial of service DoS vulnerability exists in the sftunnel functionality due to improper memory management. An unauthenticated, remote attacker can exploit this issue,...
Linux Distros Unpatched Vulnerability : CVE-2026-90087
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: do not leak an hciconn when a second LE connect is rejected createleconncomplete decides whether the failed connection is still pending by comparing ...
Linux Distros Unpatched Vulnerability : CVE-2026-90274
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - coresight: etm4x: fix underflow for usage of nrseqstate - 1 According to IHI006H Embedded Trace Macrocell Architecture Specification0, TRCSEQEVR is implemented...
Linux Distros Unpatched Vulnerability : CVE-2026-90172
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: destroy QP before mem pools on accept failure On the rdmaacceptfailed error...
Linux Distros Unpatched Vulnerability : CVE-2026-90244
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/dma: Restore locking around msipagelist Unlike a group's default domain, which is always freshly allocated and privately owned iommugroupallocdefaultdomai...
Linux Distros Unpatched Vulnerability : CVE-2026-90431
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - remoteproc: Prevent crash handling to race with rprocdel There's no synchronization between rproccrashhandlerwork and rprocdel, as such it's possible for a driv...
Linux Distros Unpatched Vulnerability : CVE-2026-90134
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: fix kmaplocalpage usage in compress Several compressed I/O paths discard the address...
EulerOS Virtualization 2.12.0 : dhcp (EulerOS-SA-2026-3635)
According to the versions of the dhcp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : BIND resolvers are vulnerable to an amplified resource consumption/exhaustion attack. If a victim resolver makes a query to a speciall...
EulerOS Virtualization 2.12.0 : gzip (EulerOS-SA-2026-3642)
According to the versions of the gzip package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global stat...
EulerOS Virtualization 2.12.0 : attr (EulerOS-SA-2026-3629)
According to the versions of the attr package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attacker...
EulerOS Virtualization 2.11.1 : libtiff (EulerOS-SA-2026-3436)
According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in LibTIFF up to 4.7.0. It has been rated as critical. This issue affects the function setrow of the file...
EulerOS Virtualization 2.12.0 : curl (EulerOS-SA-2026-3634)
According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw in curl's cookie parsing logic allows a malicious HTTP server to set 'super cookies' that bypass the Public Suffix List check...
EulerOS Virtualization 2.12.0 : libtiff (EulerOS-SA-2026-3649)
According to the versions of the libtiff package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compresse...
EulerOS Virtualization 2.11.1 : curl (EulerOS-SA-2026-3408)
According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : When curl is told to use the Certificate Status Request TLS extension, often referred to as OCSP stapling, to verify that the server...
EulerOS Virtualization 2.12.0 : samba (EulerOS-SA-2026-3672)
According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers tha...
EulerOS Virtualization 2.11.0 : kernel (EulerOS-SA-2026-3511)
According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : kernel:SUNRPC: fix a memleak in gssimportv2contextCVE-2023-52653 apparmor: Fix null pointer deref when receiving skb during sock...
EulerOS 2.0 SP10 : krb5 (EulerOS-SA-2026-3697)
According to the versions of the krb5 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In MIT Kerberos 5 aka krb5 before 1.22.3, there is an integer underflow and resultant out-of-bounds read if an application calls gssacceptseccontext...
EulerOS 2.0 SP10 : xorg-x11-server (EulerOS-SA-2026-3728)
According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A use-after-free flaw was found in the X.Org X server and Xwayland in FreeCounter. A client that sets up multiple SyncCounters and awaits...
EulerOS Virtualization 2.12.1 : expat (EulerOS-SA-2026-3583)
According to the versions of the expat package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy...
SUSE SLED15: libpcre2-16-0 / libpcre2-32-0 / libpcre2-8-0 / libpcre2-8-0-32bit / etc (SUSE-SU-2026:4241-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4241-1 advisory. - CVE-2026-86145: missing size checks in pcre2dfamatch code can lead to an out-of-bounds write bsc1279893. -...
EulerOS Virtualization 2.11.1 : binutils (EulerOS-SA-2026-3403)
According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : GNU Binutils thru 2.46 readelf contains a null pointer dereference vulnerability when processing a crafted ELF binary with malform...
EulerOS Virtualization 2.11.0 : avahi (EulerOS-SA-2026-3488)
According to the versions of the avahi package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4...
EulerOS 2.0 SP10 : libXfont2 (EulerOS-SA-2026-3698)
According to the versions of the libXfont2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap buffer overflow due to missing size checking in the property buffer when parsing PCF files in libXfont2 ComputeScaledProperties before...
EulerOS 2.0 SP10 : kernel (EulerOS-SA-2026-3684)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : locking/rtmutex: Skip removewaiter when waiter is not enqueuedCVE-2026-53163 IB/isert: Reject login PDUs shorter than ISERHEADERSLENCVE-2026-53176...
EulerOS Virtualization 2.11.0 : sudo (EulerOS-SA-2026-3563)
According to the versions of the sudo packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed use...
EulerOS Virtualization 2.12.1 : systemd (EulerOS-SA-2026-3622)
According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In udev in systemd before 260, local root execution can occur via malicious hardware devices and unsanitized kernel...
openSUSE 16 Security Update : gh (openSUSE-SU-2026:21861-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21861-1 advisory. Changes in gh: Update to version 2.100.0, fixing two deadlock issues in the vendored golang.org/x/crypto/ssh library reachable via crafted SSH...
Esri Portal for ArcGIS 11.1 / 11.3 / 11.5 / 12.0 / 12.1 < Security 2026 Update 3 Stored XSS (CVE-2026-69236)
The version of Esri Portal for ArcGIS installed on the remote host is 11.1, 11.3, 11.5, 12.0, or 12.1 and is missing the Security 2026 Update 3 Patch. It is, therefore, affected by a vulnerability: - A stored cross site scripting issue exists in Esri Portal for ArcGIS that may allow a remote,...
EulerOS 2.0 SP10 : nmap (EulerOS-SA-2026-3708)
According to the versions of the nmap packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6getdataprimitive libnetutil/netutil.cc, so the...
EulerOS 2.0 SP10 : haproxy (EulerOS-SA-2026-3741)
According to the versions of the haproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpackdhtinsert within src/hpack-tbl.c that...
EulerOS Virtualization 2.11.0 : dnsmasq (EulerOS-SA-2026-3497)
According to the versions of the dnsmasq packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with R...