Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

enterprise_linux Security Vulnerabilities | CyStack CVE Database

CVE	Exploitation status	Fix	Published	Severity
`CVE-2026-82343`Gimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling	Exploitation statusNot known exploited	FixNot confirmed	Published08/28/2026	SeverityMedium
`CVE-2026-82330`Gimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check	Exploitation statusPublic exploit	FixNot confirmed	Published08/28/2026	SeverityMedium
`CVE-2026-82328`Gimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette count	Exploitation statusPublic exploit	FixNot confirmed	Published08/28/2026	SeverityMedium
`CVE-2026-82324`Gimp: heap out-of-bounds reads in iff/ilbm loader from ham row size mismatch and nplanes=0	Exploitation statusNot known exploited	FixNot confirmed	Published08/28/2026	SeverityMedium
`CVE-2026-80101`Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation	Exploitation statusPublic exploit	FixNot confirmed	Published08/25/2026	SeverityMedium
`CVE-2026-78475`Gimp: unbounded stack vla and 21-byte stack over-read in pix (esm) loader	Exploitation statusNot known exploited	FixNot confirmed	Published08/24/2026	SeverityMedium
`CVE-2026-11861`Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships	Exploitation statusNot known exploited	FixNot confirmed	Published08/20/2026	SeverityCritical
`CVE-2026-73198`Ipa: freeipa: unauthenticated dos in `/ipa/i18n_messages` via unbounded request body read	Exploitation statusNot known exploited	FixNot confirmed	Published08/20/2026	SeverityHigh
`CVE-2026-13097`Ipa: privilege escalation via krbcanonicalname manipulation due to realm-unaware uniqueness enforcement in freeipa ldap datastore	Exploitation statusNot known exploited	FixNot confirmed	Published08/20/2026	SeverityHigh
`CVE-2026-73196`Ipa: freeipa: authenticated dos in `otptoken-add` via unbounded otp key decoding/re-encoding	Exploitation statusNot known exploited	FixNot confirmed	Published08/20/2026	SeverityMedium
`CVE-2026-73197`Ipa: freeipa: unauthenticated dos in `/ipa/migration/migration.py` via unbounded request body read	Exploitation statusNot known exploited	FixNot confirmed	Published08/20/2026	SeverityHigh
`CVE-2026-13002`Dnsmasq: infinite loop dos in dnssec nsec/nsec3 type bitmap parsing	Exploitation statusNot known exploited	FixNot confirmed	Published08/14/2026	SeverityMedium
`CVE-2026-58224`Samba: ctdb fails to do integrity checking of received packets	Exploitation statusNot known exploited	FixNot confirmed	Published08/14/2026	SeverityMedium
`CVE-2026-19617`Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser	Exploitation statusNot known exploited	FixNot confirmed	Published08/14/2026	SeverityMedium
`CVE-2026-73584`Sblim-sfcb: sblim-sfcb: privileged file corruption and denial of service via insecure temporary file handling	Exploitation statusNot known exploited	FixNot confirmed	Published08/13/2026	SeverityMedium
`CVE-2026-73583`Sblim-sfcb: unsafe deserialization in sblim-sfcb provider-manager ipc allows out-of-bounds memory access via malformed operationhdr	Exploitation statusNot known exploited	FixNot confirmed	Published08/13/2026	SeverityMedium
`CVE-2026-73585`Sblim-cmpi-base: insecure temporary file creation in sblim-cmpi-base provider registration scripts allows local symlink attack	Exploitation statusNot known exploited	FixNot confirmed	Published08/13/2026	SeverityMedium
`CVE-2026-18728`Open-iscsi: open-iscsi: integer underflow in iscsiuio ipv4 dhcp parsing	Exploitation statusNot known exploited	FixNot confirmed	Published08/13/2026	SeverityMedium
`CVE-2026-18727`Open-iscsi: open-iscsi: integer underflow in iscsiuio dhcpv6 parsing	Exploitation statusNot known exploited	FixNot confirmed	Published08/12/2026	SeverityMedium
`CVE-2026-18726`Open-iscsi: open-iscsi: denial of service in iscsiuio router advertisement parsing	Exploitation statusNot known exploited	FixNot confirmed	Published08/12/2026	SeverityMedium
`CVE-2026-19654`Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd	Exploitation statusNot known exploited	FixNot confirmed	Published08/12/2026	SeverityHigh
`CVE-2026-73433`Gstreamer1-plugins-good: gstreamer: unsigned integer underflow in avidemux fujifilm strd parsing leading to out-of-bounds read/write	Exploitation statusNot known exploited	FixYes	Published08/12/2026	SeverityMedium
`CVE-2026-73434`Gstreamer1-plugins-good: gstreamer: out-of-bounds read in avidemux vprp video field descriptor parsing	Exploitation statusNot known exploited	FixYes	Published08/12/2026	SeverityMedium
`CVE-2026-19548`Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing	Exploitation statusNot known exploited	FixNot confirmed	Published08/12/2026	SeverityMedium
`CVE-2026-19550`Freeipa: ipa: freeipa: trust-fetch-domains uses trust-read aci to gate a privileged ad trust refresh, allowing unauthorized ldap writes	Exploitation statusNot known exploited	FixNot confirmed	Published08/11/2026	SeverityHigh
`CVE-2026-59091`Gimp: gimp: multiple vulnerabilities in file format plugins via crafted image file	Exploitation statusNot known exploited	FixNot confirmed	Published08/10/2026	SeverityHigh
`CVE-2026-59090`Gimp: gimp: arbitrary code execution in psd plugin due to unsigned underflow	Exploitation statusPublic exploit	FixNot confirmed	Published08/10/2026	SeverityHigh
`CVE-2026-59088`Gimp: gimp: denial of service via signed integer overflow in fli file processing	Exploitation statusNot known exploited	FixNot confirmed	Published08/10/2026	SeverityMedium
`CVE-2026-59087`Gimp: heap buffer overflow in `file-seattle-filmworks` load — `fread` writes attacker-controlled length into undersized allocation	Exploitation statusNot known exploited	FixNot confirmed	Published08/10/2026	SeverityHigh
`CVE-2026-42170`Gimp: gimp dds plug-in heap-based buffer overflow via bpp mismatch in load_layer() (ddsread.c)	Exploitation statusNot known exploited	FixNot confirmed	Published08/08/2026	SeverityHigh
`CVE-2026-71227`Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return	Exploitation statusNot known exploited	FixYes	Published08/05/2026	SeverityMedium
`CVE-2026-71226`Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path	Exploitation statusNot known exploited	FixYes	Published08/05/2026	SeverityHigh
`CVE-2026-71225`Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries	Exploitation statusNot known exploited	FixYes	Published08/05/2026	SeverityMedium
`CVE-2026-68743`Sssd: sssd: pam responder out-of-bounds read via unchecked auth_token_length in protocol v1	Exploitation statusNot known exploited	FixNot confirmed	Published08/04/2026	SeverityMedium
`CVE-2026-68744`Sssd: sssd: nss responder uninitialized heap disclosure in initgroups reply	Exploitation statusNot known exploited	FixNot confirmed	Published08/04/2026	SeverityLow
`CVE-2026-18477`Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape	Exploitation statusNot known exploited	FixNot confirmed	Published08/03/2026	SeverityMedium
`CVE-2026-18651`389-ds-base: 389-ds-base: sasl plain bind installs connection credentials before account-lock check, allowing continued access as a locked account	Exploitation statusNot known exploited	FixNot confirmed	Published08/03/2026	SeverityMedium
`CVE-2026-18508`Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite	Exploitation statusNot known exploited	FixNot confirmed	Published08/03/2026	SeverityMedium
`CVE-2026-68742`Sssd: sssd: nss responder out-of-bounds read via unchecked addrlen in gethostbyaddr	Exploitation statusNot known exploited	FixNot confirmed	Published08/03/2026	SeverityMedium
`CVE-2026-6695`Gimp: gimp: remote code execution via crafted paa file	Exploitation statusNot known exploited	FixNot confirmed	Published08/03/2026	SeverityMedium
`CVE-2026-6694`Gimp: gimp file-png plugin: denial of service via oversized apng trns chunk	Exploitation statusNot known exploited	FixNot confirmed	Published08/03/2026	SeverityMedium
`CVE-2026-11770`389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check	Exploitation statusNot known exploited	FixNot confirmed	Published07/31/2026	SeverityHigh
`CVE-2026-15722`389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica id parsing	Exploitation statusNot known exploited	FixNot confirmed	Published07/31/2026	SeverityHigh
`CVE-2026-66759`Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns images	Exploitation statusPublic exploit	FixNot confirmed	Published07/27/2026	SeverityHigh
`CVE-2026-66757`Gimp: signed integer overflow in file-sgi (sgi-lib) causes the plugin to crash on rle sgi images	Exploitation statusPublic exploit	FixNot confirmed	Published07/27/2026	SeverityMedium
`CVE-2026-66758`Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images	Exploitation statusNot known exploited	FixNot confirmed	Published07/27/2026	SeverityHigh
`CVE-2026-66337`Libsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until()	Exploitation statusNot known exploited	FixNot confirmed	Published07/24/2026	SeverityMedium
`CVE-2026-66338`Libsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked()	Exploitation statusNot known exploited	FixNot confirmed	Published07/24/2026	SeverityMedium
`CVE-2026-66339`Libsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnels	Exploitation statusNot known exploited	FixNot confirmed	Published07/24/2026	SeverityMedium
`CVE-2026-12548`Libsoup: heap out-of-bounds read in libsoup due to integer truncation	Exploitation statusPublic exploit	FixNot confirmed	Published07/21/2026	SeverityMedium
`CVE-2026-59851`Libssh: libssh: authentication bypass via missing gssapi principal check	Exploitation statusNot known exploited	FixNot confirmed	Published07/21/2026	SeverityHigh
`CVE-2026-59850`Libssh: libssh: use-after-free via data callbacks on closed channels	Exploitation statusNot known exploited	FixNot confirmed	Published07/21/2026	SeverityMedium
`CVE-2026-59849`Libssh: libssh: denial of service via automatic certificate authentication loop	Exploitation statusNot known exploited	FixNot confirmed	Published07/21/2026	SeverityLow
`CVE-2026-59848`Libssh: libssh: denial of service via sftp responses with unknown request ids	Exploitation statusNot known exploited	FixNot confirmed	Published07/21/2026	SeverityMedium
`CVE-2026-59847`Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification	Exploitation statusNot known exploited	FixNot confirmed	Published07/21/2026	SeverityMedium
`CVE-2026-59846`Libssh: libssh: information disclosure via proxycommand %r username expansion	Exploitation statusNot known exploited	FixNot confirmed	Published07/21/2026	SeverityLow
`CVE-2026-59844`Libssh: libssh: denial of service via oversized sftp read length	Exploitation statusNot known exploited	FixNot confirmed	Published07/21/2026	SeverityMedium
`CVE-2026-59845`Libssh: libssh: denial of service via unchecked proxycommand fork() failure	Exploitation statusNot known exploited	FixNot confirmed	Published07/21/2026	SeverityMedium
`CVE-2026-59843`Libssh: libssh: denial of service via zero advertised channel packet size	Exploitation statusNot known exploited	FixNot confirmed	Published07/21/2026	SeverityMedium
`CVE-2026-59842`Libssh: libssh: information disclosure via short gssapi curve25519 public key	Exploitation statusNot known exploited	FixNot confirmed	Published07/21/2026	SeverityLow
`CVE-2026-15370`Libssh: libssh: stack buffer overflow in sftp server longname construction	Exploitation statusNot known exploited	FixNot confirmed	Published07/21/2026	SeverityMedium
`CVE-2026-15041`389-ds-base: 389-ds-base: non-constant-time comparison in pbkdf2-sha256 password verification	Exploitation statusNot known exploited	FixNot confirmed	Published07/08/2026	SeverityLow
`CVE-2026-14969`389-ds-base: 389-ds-base: static initialization vector in aes-cbc/3des-cbc attribute encryption	Exploitation statusNot known exploited	FixNot confirmed	Published07/07/2026	SeverityMedium
`CVE-2026-14940`389-ds-base: 389-ds-base: heap-buffer-overflow in dn normalization via quoted multivalued rdn	Exploitation statusNot known exploited	FixNot confirmed	Published07/07/2026	SeverityMedium
`CVE-2026-58384`Gimp: gimp: integer overflow in read_rle_channel()	Exploitation statusNot known exploited	FixNot confirmed	Published07/07/2026	SeverityHigh
`CVE-2026-59089`Gimp: gimp: denial of service via integer overflow in playstation tim loader	Exploitation statusPublic exploit	FixNot confirmed	Published07/06/2026	SeverityMedium
`CVE-2026-58380`Gimp: gimp: stack buffer overflow in pnmscanner_gettoken()	Exploitation statusNot known exploited	FixNot confirmed	Published07/06/2026	SeverityHigh
`CVE-2026-58016`Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"	Exploitation statusNot known exploited	FixYes	Published06/30/2026	SeverityHigh
`CVE-2026-58015`Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive	Exploitation statusNot known exploited	FixYes	Published06/30/2026	SeverityMedium
`CVE-2026-58014`Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"	Exploitation statusPublic exploit	FixYes	Published06/30/2026	SeverityHigh
`CVE-2026-58013`Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"	Exploitation statusNot known exploited	FixYes	Published06/30/2026	SeverityMedium
`CVE-2026-58012`Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()	Exploitation statusNot known exploited	FixYes	Published06/30/2026	SeverityMedium
`CVE-2026-58011`Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime	Exploitation statusPublic exploit	FixYes	Published06/30/2026	SeverityMedium
`CVE-2026-58010`Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()	Exploitation statusNot known exploited	FixYes	Published06/30/2026	SeverityMedium
`CVE-2026-12610`Sssd: use-after-free crash in sssd' 'sssd_pam' process	Exploitation statusNot known exploited	FixNot confirmed	Published06/30/2026	SeverityMedium
`CVE-2026-13757`P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing	Exploitation statusNot known exploited	FixNot confirmed	Published06/29/2026	SeverityMedium
`CVE-2026-13601`Yelp: yelp-xsl: overly permissive content security policy in yelp allows host file disclosure from flatpak applications	Exploitation statusNot known exploited	FixNot confirmed	Published06/29/2026	SeverityHigh
`CVE-2026-13595`Util-linux: util-linux: heap use-after-free in libblkid nested partition probing	Exploitation statusNot known exploited	FixNot confirmed	Published06/29/2026	SeverityMedium
`CVE-2026-57966`Spice-vdagent: path traversal in file transfer via unsanitized filename	Exploitation statusNot known exploited	FixNot confirmed	Published06/29/2026	SeverityMedium
`CVE-2026-57965`Spice-vdagent: integer overflow in udscs_write() leading to heap buffer overflow	Exploitation statusNot known exploited	FixNot confirmed	Published06/29/2026	SeverityMedium
`CVE-2026-53153`mm/list_lru: drain before clearing xarray entry on reparent	Exploitation statusNot confirmed	FixYes	Published06/25/2026	SeverityHigh
`CVE-2026-53145`drm/gem: Try to fix change_handle ioctl, attempt 4	Exploitation statusNot confirmed	FixYes	Published06/25/2026	SeverityHigh
`CVE-2026-53009`ice: fix double-free of tx_buf skb	Exploitation statusNot confirmed	FixYes	Published06/24/2026	SeverityHigh
`CVE-2026-53006`ipv6: fix possible UAF in icmpv6_rcv()	Exploitation statusNot confirmed	FixYes	Published06/24/2026	SeverityCritical
`CVE-2026-53002`netfilter: conntrack: remove sprintf usage	Exploitation statusNot confirmed	FixYes	Published06/24/2026	SeverityCritical
`CVE-2026-53000`netfilter: nat: use kfree_rcu to release ops	Exploitation statusNot confirmed	FixYes	Published06/24/2026	SeverityHigh
`CVE-2026-12892`Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad: 1-byte heap out-of-bounds read in h.264 nal extension slice parser	Exploitation statusNot known exploited	FixNot confirmed	Published06/23/2026	SeverityMedium
`CVE-2026-12891`Gstreamer1-plugins-bad-free: gstreamer1-plugins-bad: global buffer overflow (oob read) in h.266/vvc vui parameter parser	Exploitation statusNot known exploited	FixNot confirmed	Published06/23/2026	SeverityMedium
`CVE-2026-11820`Community.general: community.general nexmo — api credentials exposed in get url query string[security] community.general nexmo — api credentials exposed in get url query string	Exploitation statusNot known exploited	FixNot confirmed	Published06/23/2026	SeverityMedium
`CVE-2026-11819`Community.general: community.general keyring_info — os keyring passphrase returned in plaintext	Exploitation statusPublic exploit	FixNot confirmed	Published06/23/2026	SeverityMedium
`CVE-2026-12969`Dnsmasq: dnsmasq: out-of-bounds read in find_soa() due to missing extrabytes validation	Exploitation statusNot known exploited	FixNot confirmed	Published06/23/2026	SeverityMedium
`CVE-2026-55654`Openssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due to missing null sentinel termination	Exploitation statusNot known exploited	FixNot confirmed	Published06/23/2026	SeverityLow
`CVE-2026-55655`Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions	Exploitation statusNot known exploited	FixNot confirmed	Published06/23/2026	SeverityMedium
`CVE-2026-55653`Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service	Exploitation statusNot known exploited	FixNot confirmed	Published06/23/2026	SeverityMedium
`CVE-2026-12549`Libsoup: incomplete fix for cve-2026-2443: range suffix overflow in libsoup soupserver	Exploitation statusNot known exploited	FixNot confirmed	Published06/22/2026	SeverityMedium
`CVE-2026-12725`Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies	Exploitation statusNot known exploited	FixNot confirmed	Published06/22/2026	SeverityMedium
`CVE-2026-11791`389-ds-base: 389-ds-base: use-after-free in schema reload via attr_syntax_swap_ht()	Exploitation statusNot known exploited	FixNot confirmed	Published06/18/2026	SeverityMedium
`CVE-2026-12528`389-ds-base: 389-ds-base: heap-buffer-overflows in __aclp__normalize_acltxt()	Exploitation statusNot known exploited	FixNot confirmed	Published06/17/2026	SeverityMedium
`CVE-2026-42055`NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability	Exploitation statusNot known exploited	FixYes	Published06/17/2026	SeverityCritical
`CVE-2026-1767`Localsearch: tracker-miners: gnome localsearch mp3 extractor: heap buffer overflow leading to denial of service or information disclosure via malformed mp3 id3 tags	Exploitation statusNot known exploited	FixNot confirmed	Published06/16/2026	SeverityMedium

100 / 1,896 Results

Security vulnerabilities in enterprise_linux

enterprise_linux

Verify to analyze this security profile

How many security vulnerabilities does enterprise_linux have?

Does the latest enterprise_linux version have known vulnerabilities?

Run an in-depth assessment with complete web risk management