41195 matches found
SUSE SLED15 / SLES15 Security Update : Mesa (SUSE-SU-2026:1835-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:1835-1 advisory. This update for Mesa fixes the following issue: - CVE-2026-40393: out-of-bounds memory access can occur in WebGPU becau...
[SECURITY] Fedora 43 Update: firefox-150.0.3-1.fc43
Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...
Debian dsa-6274 : ata-modules-6.12.74+deb13+1-armmp-di - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6274 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6274-1 [email protected] https://www.debian.org/securit...
CVE-2026-6722 affecting package php for versions less than 8.3.31-1
CVE-2026-6722 affecting package php for versions less than 8.3.31-1. A patched version of the package is available...
CVE-2026-6665 affecting package pgbouncer for versions less than 1.25.2-1
CVE-2026-6665 affecting package pgbouncer for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-23479 affecting package valkey for versions less than 8.0.9-1
CVE-2026-23479 affecting package valkey for versions less than 8.0.9-1. A patched version of the package is available...
CVE-2025-14179 affecting package php for versions less than 8.3.31-1
CVE-2025-14179 affecting package php for versions less than 8.3.31-1. A patched version of the package is available...
CVE-2026-6735 affecting package php for versions less than 8.3.31-1
CVE-2026-6735 affecting package php for versions less than 8.3.31-1. A patched version of the package is available...
CVE-2026-6666 affecting package pgbouncer for versions less than 1.25.2-1
CVE-2026-6666 affecting package pgbouncer for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-7262 affecting package php for versions less than 8.3.31-1
CVE-2026-7262 affecting package php for versions less than 8.3.31-1. A patched version of the package is available...
CVE-2026-6667 affecting package pgbouncer for versions less than 1.25.2-1
CVE-2026-6667 affecting package pgbouncer for versions less than 1.25.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-44656 affecting package vim for versions less than 9.2.0461-1
CVE-2026-44656 affecting package vim for versions less than 9.2.0461-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-7261 affecting package php for versions less than 8.3.31-1
CVE-2026-7261 affecting package php for versions less than 8.3.31-1. A patched version of the package is available...
CVE-2026-43989
JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, the uploadwasm MCP tool accepted a filesystem path from the agent and uploaded whatever bytes the path resolved to, with no validation of location, symlink target, file size, or file format. This vulnerability is...
CVE-2026-44515 Nextcloud News: Authenticated blind SSRF via feed URL
Nextcloud News is an RSS/Atom feed reader. Prior to 28.3.0-beta.1, Nextcloud News allows authenticated users to add feeds by providing a feed URL via the web interface or the API. In affected versions, an authenticated attacker could provide a URL pointing to internal/private IP ranges or...
Critical: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: nginx: nginx-1.30.1-1.hum1 aarch64, x8664 nginx-all-modules-1.30.1-1.hum1 noarch nginx-core-1.30.1-1.hum1 aarch64, x8664 nginx-filesystem-1.30.1-1.hum1 noarch nginx-mod-devel-1.30.1-1.hum1 aarch6...
Amazon Linux 2 : xdg-desktop-portal, --advisory ALAS2-2026-3298 (ALAS-2026-3298)
The version of xdg-desktop-portal installed on the remote host is prior to 1.0.2-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3298 advisory. Flatpak xdg-desktop-portal before 1.20.4 and 1.21.x before 1.21.1 allows any Flatpak app to trash any file in the host...
CVE-2026-21821
The HCL BigFix SCM Reporting site contains an outdated and unsupported version of the jQuery 1.x library. Since jQuery 1.x has reached end-of-life and no longer receives security updates, it may expose the application to publicly known security weaknesses and increase the risk of client-side...
CVE-2026-21821 HCL BigFix SCM Reporting is affected by vulnerabilities in jQuery
The HCL BigFix SCM Reporting site contains an outdated and unsupported version of the jQuery 1.x library. Since jQuery 1.x has reached end-of-life and no longer receives security updates, it may expose the application to publicly known security weaknesses and increase the risk of client-side...
