3929 matches found
Important: pipewire security update
PipeWire is a multimedia server for Linux and other Unix like operating systems. Security Fixes: pipewire: PipeWire: Sandbox escape and arbitrary code execution via malicious library loading CVE-2026-5674 For more details about the security issues, including the impact, a CVSS score,...
pipewire security update
1.4.11-1 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164823 1.4-6-1 - Update version to 1.4.6 Resolves: DESKTOP-1857 1.2.7-1 - Update version to 1.2.7 - Resolves: RHEL-76017 1.2.6-3 - Enable libcamera support in RHEL-10 - Resolves: RHEL-64753 1.2.6-2 - Bump release for October...
MiracleLinux 9 : postgresql:16 (AXSA:2026-1358:01)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1358:01 advisory. postgresql: PostgreSQL: Operating system account hijack via symlink following in pgbasebackup and pgrewind CVE-2026-6475 postgresql: PostgreSQL libp...
MiracleLinux 9 : postgresql:18 (AXSA:2026-1357:01)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1357:01 advisory. postgresql: PostgreSQL: Operating system account hijack via symlink following in pgbasebackup and pgrewind CVE-2026-6475 postgresql: PostgreSQL libp...
Linux Distros Unpatched Vulnerability : CVE-2026-50243
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In NLnet Labs Unbound 1.6.2 up to and including 1.25.1, when Unbound is configured with the 'respip' module in front of the validator together with a...
Linux Distros Unpatched Vulnerability : CVE-2026-63729
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The SyncTeX parser synctexparser.c shipped with TeX Live and embedded by downstream consumers such as GNOME Evince contains a heap use-after-free vulnerability...
SUSE SLED15: avahi / avahi-autoipd / avahi-compat-howl-devel / etc (SUSE-SU-2026:3218-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3218-1 advisory. This update for avahi fixes the following issue: - CVE-2025-59529: local DoS due to simple protocol server ignoring...
GHSA-V42F-V8XC-J435 Budibase: SSRF via DNS rebinding in the REST datasource integration
Summary Budibase's central outbound-fetch guard fetchWithBlacklist prevents SSRF/DNS-rebinding by resolving the target hostname, checking every resolved IP against the blacklist, and pinning the connection to the validated IP. The pin is implemented as a Node https.Agent makePinnedAgent. The fix...
Budibase: SSRF via DNS rebinding in the REST datasource integration
Summary Budibase's central outbound-fetch guard fetchWithBlacklist prevents SSRF/DNS-rebinding by resolving the target hostname, checking every resolved IP against the blacklist, and pinning the connection to the validated IP. The pin is implemented as a Node https.Agent makePinnedAgent. The fix...
Alibaba Cloud Linux 3 : 0212: cifs-utils (ALINUX3-SA-2026:0212)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0212 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-12505: A flaw was found in the cifs-utils...
Oracle Linux 8 : maven:3.8 (ELSA-2026-40841)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-40841 advisory. - Fix CVE-2025-67030: Directory Traversal in Expand.extractFile Resolves: RHEL-165339 Tenable has extracted the preceding description block directly from the...
Security update for the Linux Kernel (important)
openSUSE security update: security update for the linux kernel ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21388-1 Rating: important References: bsc1149651 bsc1204315 bsc1236743 bsc1255029 bsc1257506 bsc1258538 bsc1259800 bsc1260565 bsc1261250...
@n8n/agents (0.17.0), @n8n/ai-node-sdk (0.22.0) +25 more potentially affected by unknown CVE via n8n-workflow (2.32.0)
n8n-workflow NPM version 2.32.0 is affected by a known vulnerability. The following packages have a transitive dependency on n8n-workflow and may be impacted: - @n8n/agents 0.17.0 - @n8n/ai-node-sdk 0.22.0 - @n8n/ai-utilities 0.25.0 - @n8n/ai-workflow-builder 1.32.0 - @n8n/api-types 1.32.0 -...
Malicious code in n8n-nodes-quick-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a3ad37cc152517b09b8ee72a009a179399ddf802e7f22c126c9d104b4252d5a On require/import, index.js spawns /bin/bash wired to a TCP socket at hardcoded IP 103.27.109.184:8895, giving the remote operator an interactive she...
MAL-2026-11005 Malicious code in n8n-nodes-quick-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a3ad37cc152517b09b8ee72a009a179399ddf802e7f22c126c9d104b4252d5a On require/import, index.js spawns /bin/bash wired to a TCP socket at hardcoded IP 103.27.109.184:8895, giving the remote operator an interactive she...
USN-8589-1: Apache HTTP Server vulnerabilities
It was discovered that Apache HTTP Server's modldap module incorrectly handled memory when processing per-directory configurations. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2026-29167 It was discovered that Apache HTTP Server's...
Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities
Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-1933 DESCRIPTION: A flaw was found in Samba’s handling of NTFS-style reparse points on shares configured with read only = yes. Due to missing SMB-layer access checks,...
pedit-cow-exploit
CVE-2026-46331 – pedit COW Local Privilege Escalation Proof-of...
AlmaLinux 8 : javapackages-tools:201801 (ALSA-2026:41948)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:41948 advisory. org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method CVE-2025-67030 Tenable has extracted the preceding description block...