15414 matches found
Amazon Linux 2023 : aspnetcore-runtime-9.0, aspnetcore-runtime-dbg-9.0, aspnetcore-targeting-pack-9.0 (ALAS2023-2026-2048)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2048 advisory. Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network. CVE-2026-47303 Improper verification of cryptographic...
Amazon Linux 2023 : freerdp, freerdp-devel, freerdp-libs (ALAS2023-2026-2053)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2053 advisory. FreeRDP before 3.28.0 affected outlength, so out-of-bounds bytes are written before the bounds check. On the server side, when a client selects RDP Standard Security, the encrypted client rand...
Amazon Corretto Java 8.x < 8.504.01.1 Multiple Vulnerabilities
The version of Amazon Corretto installed on the remote host is 8 prior to 8.504.01.1. It is, therefore, affected by multiple vulnerabilities as referenced in the corretto-8-2026-Aug-18 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ...
Amazon Linux 2 : perl-Date-Manip, --advisory ALAS2-2026-3856 (ALAS-2026-3856)
The version of perl-Date-Manip installed on the remote host is prior to 6.41-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3856 advisory. Date::Manip versions through 6.99 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeri...
Amazon Linux 2 : docker, --advisory ALAS2DOCKER-2026-138 (ALASDOCKER-2026-138)
The version of docker installed on the remote host is prior to 25.0.16-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2DOCKER-2026-138 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable has extract...
Amazon Linux 2 : containerd, --advisory ALAS2NITRO-ENCLAVES-2026-117 (ALASNITRO-ENCLAVES-2026-117)
The version of containerd installed on the remote host is prior to 2.1.9-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2026-117 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable h...
Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-2058)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2058 advisory. In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexfiles: reject zero filehandle version count CVE-2026-53392 In the Linux kernel, the following vulnerability has be...
Amazon Linux 2023 : docker (ALAS2023-2026-2062)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2062 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable has extracted the preceding description block directly from the tested product security...
Amazon Linux 2 : docker, --advisory ALAS2NITRO-ENCLAVES-2026-116 (ALASNITRO-ENCLAVES-2026-116)
The version of docker installed on the remote host is prior to 25.0.16-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2NITRO-ENCLAVES-2026-116 advisory. A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Tenable has...
Important: docker
Issue Overview: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes. CVE-2026-56852 Affected Packages: docker Issue Correction: Run dnf update docker --releasever 2023.12.20260817 or dnf update --advisory ALAS2023-2026-2062 --releasever 2023.12.20260817 to...
openSUSE 16 Security Update : amazon-ecs-init (openSUSE-SU-2026:21574-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21574-1 advisory. This update for amazon-ecs-init fixes the following issue: Update to version 1.106.0. Security issues fixed: - CVE-2026-10722: github.com/cilium/ebpf:...
GO-2026-4405 vulnerabilities
Vulnerabilities for packages: chainctl, dagdotdev, cg, amazon-ssm-agent...
GO-2026-5497 vulnerabilities
Vulnerabilities for packages: dagdotdev, amazon-ssm-agent-fips...
GO-2026-4600 vulnerabilities
Vulnerabilities for packages: grafana-rollout-operator, flux-notification-controller, victoriametrics-cluster-fips, nova-fips, podinfo, grafana-operator-fips, grafana-operator, pgwatch, steampipe, dkron, victoriametrics, polaris, cert-manager-fips, victoriametrics-cluster, flux-source-controller,...
GO-2026-4406 vulnerabilities
Vulnerabilities for packages: chainctl, dagdotdev, cg, amazon-ssm-agent...
GO-2026-5422 vulnerabilities
Vulnerabilities for packages: dagdotdev, amazon-ssm-agent-fips...
GO-2024-3311 vulnerabilities
Vulnerabilities for packages: prometheus, amazon-cloudwatch-agent-operator, pulumi, promxy, vault, amazon-cloudwatch-agent-operator-fips, promxy-fips...
GO-2025-3525 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector, nats, tempo, kubeflow-pipelines, k8sgpt, kargo, argo-workflows, amazon-cloudwatch-agent, opentelemetry-collector, opentelemetry-collector-contrib, argo-rollouts, grafana-alloy...
GO-2026-5264 vulnerabilities
Vulnerabilities for packages: metrics-server, node-problem-detector, tempo, aws-otel-collector, keda, opentelemetry-collector, istio, loki, trillian, grafana, minio-operator, fluent-bit-plugin-loki, cloud-sql-proxy, k8sgpt, prometheus, jaeger, prometheus-operator, datadog-agent, karma,...