214833 matches found
Oracle Linux 10 : openssl (ELSA-2026-22314)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-22314 advisory. - Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,...
Photon OS 5.0: Linux PHSA-2026-5.0-0926
An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0926. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
openSUSE 16: cluster-md-kmp-64kb / cluster-md-kmp-azure / cluster-md-kmp-default / etc (openSUSE-SU-2026:21388-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21388-1 advisory. The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2025-10263:...
GHSA-8QQM-FP2Q-V734
creationtimestamp| type| source ---|---|--- 2026-07-23 23:59:46+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mre2ahctmm2e...
CVE-2026-16396
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in WebExtensions...
CVE-2026-15718
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw...
CVE-2026-16368
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the JavaScript: WebAssembly component...
CVE-2026-16357
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Graphics component...
DEBIAN-CVE-2026-16804
Use after free in Input in Google Chrome prior to 150.0.7871.186 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-16764 OWASP DefectDojo API/Web serializers.py UserSerializer privileges management
A vulnerability was identified in OWASP DefectDojo 2.59.0. This issue affects the function UserSerializer of the file dojo/apiv2/serializers.py of the component API/Web. Such manipulation of the argument isstaff leads to improper privilege management. The attack may be performed from remote. The...
OPENSUSE-SU-2026:21432-1 Security update for gh
This update for gh fixes the following issues: Changes in gh: - CVE-2026-39821: reject all-ASCII xn-- Punycode labels in the vendored golang.org/x/net/idna package regardless of Go's unicode.Version boo1266618...
EUVD-2026-48428
The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to cause a memory corruption via a Read Request...
GHSA-R7WM-3CXJ-WFF9 vulnerabilities
Vulnerabilities for packages: scala, keycloak, tez, sonarqube, apache-tika, trino, spark, keycloak-config-cli, infinispan, spdx-tools-java, wildfly, apache-nifi, cass-config-builder, akhq, apache-nifi-registry, druid, flyway, apicurio-registry, opensearch, dependency-track, gradle, logstash,...
aana (>=0.2.1, <=0.2.2), abgrouponline (>=1.0.0, <=1.0.2) +577 more potentially affected by CVE-2026-65920 via diffusers (>=0.2.4, <=0.40.0)
diffusers PYPI version =0.2.4, =0.2.1, =1.0.0, =0.1.1, =0.2.1, =20260210.0.0, =0.2.14, =0.1.2, =0.0.1, =0.0.3, =0.10.6, =0.0.1, =0.0.1, =1.8.20, =1.19.0 and more Source cves: CVE-2026-65920 Source advisory: SNYK:PYTHON-DIFFUSERS-18313062...
Open Redirect
Overview Affected versions of this package are vulnerable to Open Redirect via the navigation mechanisms when attacker-supplied paths containing a backslash are processed. An attacker can redirect users to unintended external sites by crafting malicious links or inputs. Remediation Upgrade...
CVE-2026-62565
creationtimestamp| type| source ---|---|--- 2026-07-23 18:21:08+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-61325
creationtimestamp| type| source ---|---|--- 2026-07-23 18:19:17+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-61311
creationtimestamp| type| source ---|---|--- 2026-07-23 18:19:02+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-08-01 09:32:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrz5yqdmbb2b 2026-08-01 09:33:08+00:00| seen|...