RHSA-2026:48386 Red Hat Security Advisory: kernel security update

Bulletin has no description...

RHSA-2026:42125 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

Exploit for CVE-2025-15001

CV...

Information Disclosure postcss Dependency in Crowd Data Center

This High severity Information Disclosure vulnerability was introduced in versions 6.1.0, 6.2.0, 6.3.0, 7.0.0, 7.1.0, and 7.2.0 of Crowd Data Center. This Information Disclosure vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N allows an...

Insecure Deserialization jackson-databind in Crowd Data Center

This High severity Insecure Deserialization vulnerability was introduced in versions 6.0.0, 6.1.0, 6.2.0, 6.3.6, 7.0.0, 7.1.0, and 7.2.0 of Crowd Data Center. This Insecure Deserialization vulnerability, with a CVSS Score of 8.1 and a CVSS Vector of CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H...

CVE-2026-17543 affecting package php for versions less than 8.3.33-1

CVE-2026-17543 affecting package php for versions less than 8.3.33-1. An upgraded version of the package is available that resolves this issue...

Malicious code in test-dev-store (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e03286d5422408fe1567e37542070ac8d0610b319d57e941e3dcb2c28004bfc test-dev-store is a library module of an infostealer toolkit. utils.js exports path builders that specifically target Chrome/Chromium profile...

GHSA-WG4G-WM44-CH5J

creationtimestamp| type| source ---|---|--- 2026-08-01 03:32:01+00:00| seen| https://gist.github.com/alon710/1bc8c607afec88c321177b4e1f89ad03...

GHSA-PJP7-Q6WP-97QX

creationtimestamp| type| source ---|---|--- 2026-08-01 02:31:13+00:00| seen| https://gist.github.com/alon710/32cccaf1dfa9c1c40b850f71e29f1c0f...

GHSA-3GFH-MQ5V-C264 vulnerabilities

Vulnerabilities for packages: linux-qemu, linux-vmware, linux-azure, linux-gcp...

CVE-2026-54768

creationtimestamp| type| source ---|---|--- 2026-08-01 00:35:06+00:00| published-proof-of-concept| https://github.com/wp-graphql/wp-graphql/security/advisories/GHSA-jhh7-832h-f8hv 2026-08-01 01:31:13+00:00| seen| https://gist.github.com/alon710/662b2c487ba3f86d2983484c0e6fc728...

GHSA-C5PX-58J2-7FQP

creationtimestamp| type| source ---|---|--- 2026-08-01 00:31:31+00:00| seen| https://gist.github.com/alon710/dc2fc48bf583407e8cd73eba1edb4959...

openSUSE 16: ctdb / ctdb-pcp-pmda / ldb-tools / libldb-devel / libldb2 / etc (openSUSE-SU-2026:21475-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21475-1 advisory. - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server bsc1271672. - CVE-2026-15779: pamwinbind module with...

Photon OS 5.0: Openssh PHSA-2026-5.0-0936

An update of the openssh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0936. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Oracle Linux 9 : kernel (ELSA-2026-47040)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47040 advisory. - blk-mq: reinsert cached request to the list CKI Backport Bot RHEL-213163 CVE-2026-64017 - blk-mq: pop cached request if it is usable CKI Backport Bo...

openSUSE 16: mcphost / mcphost-bash-completion / mcphost-fish-completion / etc (openSUSE-SU-2026:21480-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21480-1 advisory. - CVE-2026-5160: github.com/yuin/goldmark/renderer: Cross-site Scripting due to improper URL validation bsc1272488. - CVE-2026-39821:...

Photon OS 5.0: Libvirt PHSA-2024-5.0-0268

An update of the libvirt package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0268. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Oracle Linux 7 : python-tornado (ELSA-2026-24342)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-24342 advisory. - Backport fix for CVE-2026-31958 Orabug: 39521310 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Debian dsa-6408 : chromium - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6408 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6408-1 [email protected] https://www.debian.org/securit...

Oracle Linux 8 : javapackages-tools:201801 (ELSA-2026-41948)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-41948 advisory. - Resolves: CVE-2019-10086, CVE-2025-48734 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...