2606 matches found
DEBIAN-CVE-2026-1285
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. django.utils.text.Truncator.chars and Truncator.words methods with html=True and the truncatecharshtml and truncatewordshtml template filters allow a remote attacker to cause a potential denial-of-service via...
DEBIAN-CVE-2025-71183
In the Linux kernel, the following vulnerability has been resolved: btrfs: always detect conflicting inodes when logging inode refs After rename exchanging either with the rename exchange operation or regular renames in multiple non-atomic steps two inodes and at least one of them is a directory,...
PT-2026-5352
Name of the Vulnerable Software and Affected Versions versions prior to 2026-0010 Description An issue exists in the onTransact function within IDrmManagerService.cpp that may lead to a local escalation of privilege. This is due to a missing bounds check, potentially resulting in an out-of-bounds...
BELL-CVE-2026-23013
Bulletin has no description...
RHEL 9 : image-builder (RHSA-2026:1377)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:1377 advisory. A local binary for building customized OS artifacts such as VM images and OSTree commits. Uses osbuild under the hood. Security Fixes: golang:...
openSUSE Security Advisory (SUSE-SU-2026:0231-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
RHEL 8 : poppler (RHSA-2026:1091)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:1091 advisory. Poppler is a Portable Document Format PDF rendering library, used by applications such as Evince. Security Fixes: poppler: Out-of-Bounds Read in...
CVE-2026-0528 vulnerabilities
Vulnerabilities for packages: beats, cloudbeat-fips, apm-server, cloudbeat, apm-server-fips...
CVE-2026-23831 vulnerabilities
Vulnerabilities for packages: aactl, trivy, neuvector-sigstore-interface-fips, spire-server-fips, falcoctl, ratify-fips, tkn, falcoctl-fips, crossplane-fips, tekton-chains, vexctl, flux-source-controller, kyverno-notation-aws-fips, slsa-verifier, image-factory, trivy-operator, trivy-fips, zarf,...
CVE-2026-24388
creationtimestamp| type| source ---|---|--- 2026-01-22 17:30:15+00:00| seen| https://gist.github.com/Darkcrai86/a5cf9a93fd0e74ef40fc1c5974331a2e 2026-01-22 19:16:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mczvkklgul2j...
glib2 security update
2.56.4-168 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Enable testsuite during RPM check phase...
CVE-2026-21957
...
MiracleLinux 4 : firefox-68.12.0-1.0.1.AXS4 (AXSA:2020-279:19)
The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2020-279:19 advisory. Mozilla: Attacker-induced prompt for extension installation CVE-2020-15664 Mozilla: Use-After-Free when aborting an operation CVE-2020-15669 Tenable...
MiracleLinux 9 : tigervnc-1.12.0-5.el9.1 (AXSA:2023-5025:04)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-5025:04 advisory. xorg-x11-server: DeepCopyPointerClasses use-after-free leads to privilege elevation CVE-2023-0494 Tenable has extracted the preceding description block...
MiracleLinux 9 : httpd-2.4.57-5.el9 (AXSA:2023-6899:07)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6899:07 advisory. httpd: modproxyuwsgi HTTP response splitting CVE-2023-27522 CVE-2023-27522 HTTP Response Smuggling vulnerability in Apache HTTP Server via modproxyuwsgi. Thi...
BELL-CVE-2026-0988
Bulletin has no description...
MiracleLinux 4 : bind-9.8.2-0.47.3.0.1.rc1.AXS4 (AXSA:2016-718:05)
"The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2016-718:05 advisory. BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names ...
MiracleLinux 7 : rh-php56-php-5.6.5-9.el7 (AXSA:2016-623:03)
The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2016-623:03 advisory. PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in...