29069 matches found
Oracle Linux 8 : libyang (ELSA-2026-24545)
The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-24545 advisory. 1.0.184-2 - DoS or arbitrary code execution via maliciously crafted LYB binary blob - Resolves: RHEL-177017 - CVE-2026-44673 Tenable has extracted the precedin...
MiracleLinux 8 : unbound-1.16.2-5.11.el8_10 (AXSA:2026-768:04)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-768:04 advisory. unbound: Heap overflow and crash with multiple nsid, cookie, padding EDNS options CVE-2026-42944 unbound: Unbound DNSSEC Validator Denial of Service...
MiracleLinux 8 : frr-7.5.1-24.el8_10 (AXSA:2026-771:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-771:01 advisory. frr: denial of service via crafted FlowSpec component CVE-2026-37457 Tenable has extracted the preceding description block directly from the MiracleLinux...
MiracleLinux 8 : compat-openssl10-1.0.2o-4.el8_10.2 (AXSA:2026-770:01)
The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-770:01 advisory. openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing CVE-2026-28390 Tenable has extracted the preceding...
AlmaLinux 8 : bind (ALSA-2026:24339)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:24339 advisory. bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation CVE-2026-3039 bind: BIND: Denial of Service via specially crafted DNS messages...
CVE-2026-49234
When sending a specifically crafted non-UTF-8 string as select-asn query parameter to the /api/v1/origins endpoint, Routinator crashes. This only affects users who allow API access from untrusted networks...
Security update for perl-XML-LibXML (important)
openSUSE security update: security update for perl-xml-libxml ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20908-1 Rating: important References: bsc1264715 Cross-References: CVE-2026-8177 CVSS scores: CVE-2026-8177 SUSE : 8.2...
Oracle Linux 8 : bind (ELSA-2026-24339)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-24339 advisory. - Fix GSS-API resource leak CVE-2026-3039 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...
AlmaLinux 8 : unbound (ALSA-2026:24365)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:24365 advisory. unbound: Heap overflow and crash with multiple nsid, cookie, padding EDNS options CVE-2026-42944 unbound: Unbound DNSSEC Validator Denial of Service via...
MiracleLinux 8 : firefox-140.10.2-1.el8_10.ML.1 (AXSA:2026-760:12)
The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-760:12 advisory. firefox: Other issue in the WebRTC component CVE-2026-8094 firefox: Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR 140.10.2 and Firefo...
thunderbird security update
An update is available for thunderbird. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Thunderbird is a standalone mail and newsgroup client. Security...
EulerOS Virtualization 2.13.1 : libpcap (EulerOS-SA-2026-2134)
According to the versions of the libpcap package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8...
CVE-2026-41173
The AWS X-Ray Remote Sampler package provides a sampler which can get sampling configurations from AWS X-Ray. Prior to 0.1.0-alpha.8, OpenTelemetry.Sampler.AWS reads unbounded HTTP response bodies from a configured AWS X-Ray remote sampling endpoint into memory. AWSXRaySamplerClient.DoRequestAsyn...
GHSA-JHQ4-533P-8P4C vulnerabilities
Vulnerabilities for packages: openjdk-17-openj9, openjdk-21-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-11-openj9, openjdk-8-openj9...
CVE-2025-6052 vulnerabilities
Vulnerabilities for packages: openjdk-17-openj9, openjdk-21-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-11-openj9, openjdk-8-openj9...
GHSA-982W-2WQP-Q964 vulnerabilities
Vulnerabilities for packages: openjdk-17-openj9, openjdk-21-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-11-openj9, openjdk-8-openj9...
GHSA-4RJF-P9GV-749H vulnerabilities
Vulnerabilities for packages: openjdk-17-openj9, openjdk-21-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-11-openj9, openjdk-8-openj9...
GHSA-4XX5-2CR7-4QRQ vulnerabilities
Vulnerabilities for packages: openjdk-17-openj9, openjdk-21-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-11-openj9, openjdk-8-openj9...