201527 matches found
Apple Security Advisory 07-27-2026-4
Apple Security Advisory 07-27-2026-4 - macOS Sonoma 14.8.8 addresses buffer overflow, bypass, code execution, denial of service, double free, heap corruption, information leakage, integer overflow, out of bounds read, out of bounds write, traversal, and use-after-free vulnerabilities...
Autodesk FBX SDK < 2020.3.10 Multiple Vulnerabilities (adsk-sa-2026-0010)
The version of FBX SDK installed on the remote host is prior to 2020.3.10. It is, therefore, affected by multiple vulnerabilities as referenced in the adsk-sa-2026-0010 advisory. - A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow...
MiracleLinux 9 : gstreamer1-plugins-bad-free-1.22.12-7.el9_8.1 (AXSA:2026-1479:03)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1479:03 advisory. gstreamer1-plugins-bad-free: GStreamer: Denial of service via AV1 tilelistobu parser byte/bit confusion CVE-2026-52718 gstreamer1-plugins-bad-free:...
MiracleLinux 9 : grafana-10.2.6-23.el9_8 (AXSA:2026-1487:22)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1487:22 advisory. golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-39821 Tenable has extracted the...
SUSE SLES15: apache2-mod_php8 / php8 / php8-bcmath / php8-bz2 / php8-calendar / etc (SUSE-SU-2026:3513-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3513-1 advisory. - CVE-2026-7260: circular symbolic links in phar archives can lead to unbounded recursion and cause C stack exhaustion bsc1273077. ...
RHEL 9 : systemd (RHSA-2026:51277)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:51277 advisory. The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive...
Cisco IOS XE Software Extensible Messaging Client Protocol DoS (cisco-sa-ios-xmcp-thbAr34t)
According to its self-reported version, Cisco IOS-XE Software is affected by a denial of service vulnerability. A flaw exists in the Extensible Messaging Client Protocol XMCP due to improper handling of malformed XMCP packets. An unauthenticated, remote attacker can exploit this issue, via a...
Slackware Linux 15.0 / current libXfont2 Multiple Vulnerabilities (SSA:2026-218-01)
The version of libXfont2 installed on the remote host is prior to 2.0.9. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-218-01 advisory. New libXfont2 packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...
F5 Networks BIG-IP : NLnet Labs Unbound vulnerability (K000162784)
The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000162784 advisory. NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the jostle logic that could defeat its...
RHEL 10 : kernel (RHSA-2026:51295)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:51295 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv6: ioam: fix heap buffer overflow ...
MiracleLinux 9 : plexus-utils-3.3.0-14.el9_8 (AXSA:2026-1492:01)
The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1492:01 advisory. org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method CVE-2025-67030 Tenable has extracted the preceding description bloc...
Oracle Linux 9 : kernel (ELSA-2026-51035)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-51035 advisory. - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup Waiman Long RHEL-193526 CVE-2026-52977 - futex: Require sysfutexrequeue to have...
RHEL 8 : container-tools:rhel8 (RHSA-2026:51288)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:51288 advisory. The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes:...
MiracleLinux 9 : vim-8.2.2637-26.el9_8.10.ML.1 (AXSA:2026-1480:21)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1480:21 advisory. vim: command injection when decompressing .tgz archives CVE-2026-46483 vim: Vim: Arbitrary Code Execution via crafted directory names CVE-2026-47162...
HPESBHF05066 rev.1 - HPE Cray XD670 Server Using Certain Intel Processors, INTEL-SA-01396, 2026.1 IPU, Intel Processor Firmware Advisory, Local Escalation of Privilege Vulnerability
Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray XD670 - Prior to 2.09 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-31648 | CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N | 3.9 |...
GHSA-6HR6-W5QG-QMWG
creationtimestamp| type| source ---|---|--- 2026-08-06 23:32:34+00:00| seen| https://gist.github.com/alon710/91251538851544e4ecb69dd2c9aa7a2b 2026-08-07 00:07:12+00:00| seen| https://gist.github.com/alon710/91251538851544e4ecb69dd2c9aa7a2b...
CVE-2026-71439
creationtimestamp| type| source ---|---|--- 2026-08-06 22:35:14+00:00| published-proof-of-concept| https://github.com/mermaid-js/mermaid/security/advisories/GHSA-rhh3-jpg6-66xh...
CVE-2026-71430
creationtimestamp| type| source ---|---|--- 2026-08-06 22:35:12+00:00| published-proof-of-concept| https://github.com/uhop/node-re2/security/advisories/GHSA-8hcv-x26h-mcgp 2026-08-07 06:34:35+00:00| seen| https://gist.github.com/alon710/455dd27ab1381c77c49e252fb102cb9f...
CVE-2026-71498
creationtimestamp| type| source ---|---|--- 2026-08-06 22:35:09+00:00| published-proof-of-concept| https://github.com/uhop/node-re2/security/advisories/GHSA-j4r3-hg7j-8chg 2026-08-07 05:35:28+00:00| seen| https://gist.github.com/alon710/0c61a6195ede2fd8a0ca10d8b63bbf6e...