170549 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-65609
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nnn is vulnerable to Out-of-Bound write vulnerability. Due to lack of validation of attacker-controlled length fields deserialized from a session file, a crafte...
Linux Distros Unpatched Vulnerability : CVE-2026-71135
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable...
Linux Distros Unpatched Vulnerability : CVE-2026-71131
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable...
Linux Distros Unpatched Vulnerability : CVE-2026-54330
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the Ceph Object Gateway R...
cve-2026-47849 - HIGH - Spring Data REST allows mutation of identifier and version properties via JSON Patch
cve-2026-47849 - HIGH - Spring Data REST allows mutation of identifier and version properties via JSON Patch...
Linux Distros Unpatched Vulnerability : CVE-2026-76879
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76879 Note that Nessus relies on the presence of the...
Linux Distros Unpatched Vulnerability : CVE-2026-73639
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Imager::File::PNG versions from 1.003 before 1.004 for Perl write past the end of the row buffer reading a PNG with a tRNS transparency chunk in readdirect8. Wi...
Linux Distros Unpatched Vulnerability : CVE-2026-73638
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Imager versions from 0.4502 before 1.035 for Perl read outside the EXIF block via unchecked start offsets in tiffloadifd. tiffloadifd validates an IFD entry's...
Linux Distros Unpatched Vulnerability : CVE-2026-64730
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The issue was addressed with improved UI. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6...
Virtuozzo Infrastructure 7.3 Update 1 Hotfix 3 (7.3.1-66)
This update provides security fixes. Vulnerability id: VSTOR-140619 A security fix for CVE-2026-64531. Vulnerability id: VSTOR-140678 A security fix for CVE-2026-64561...
Authorization Bypass Through User-Controlled Key
Overview org.springframework.data:spring-data-rest-core is a Spring Data REST. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the PATCH process. An attacker can overwrite identifier and version properties by sending crafted RFC 6902 JSON...
mysql:8.4 security, bug fix, and enhancement update
mecab 0.996-3.4 - Bump version for package rebuild We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo - Resolves: 2182069 0.996-3.3 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz1991688 0.996-3.2 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related:...
PT-2026-79001
A weakness has been identified in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. This affects the function CipConnMgrClass::forward open of the file cipconnectionmanager.cc of the component ForwardOpen Handler. Executing a manipulation of the argument product code can lead to...
Photon OS 5.0: Gawk PHSA-2026-5.0-91-0966
An update of the gawk package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0966. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Linux Distros Unpatched Vulnerability : CVE-2025-30156
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the CephX authentication...
Linux Distros Unpatched Vulnerability : CVE-2026-65611
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nnn does not sanitize the path variable. An attacker can create a directory on a shared filesystem, removable media, or inside an extracted archive whose name...
Linux Distros Unpatched Vulnerability : CVE-2026-64728
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A permissions issue was addressed with improved validation. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS...
Linux Distros Unpatched Vulnerability : CVE-2026-65612
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nnn does not sanitize the filename variable. An attacker can place a file with a crafted name on a shared filesystem, removable media, or inside an extracted...
Virtuozzo Hybrid Infrastructure 7.1 Hotfix 4 (7.1.0-205)
This update provides security fixes. Vulnerability id: VSTOR-130225 A security fix for CVE-2026-31431. Vulnerability id: VSTOR-130767 Security fixes for CVE-2026-43284 and CVE-2026-43500. Vulnerability id: VSTOR-131868 A security fix for CVE-2026-46333. Vulnerability id: VSTOR-132074 A security f...
PT-2026-80731
Name of the Vulnerable Software and Affected Versions Velero versions prior to 1.18.1 Description An attacker who gains control of the backup object-storage backend can upload a malicious backup tarball. This tarball can contain parent-directory paths that allow files to escape the intended...