15234 matches found
AlmaLinux 8 : git-lfs (ALSA-2026:30853)
The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:30853 advisory. golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-39821 Tenable has extracted the...
CVE-2026-51221
A buffer overflow in the GetAttributeList function of EIPStackGroup OpENer commit 76b95c allows attackers to cause a Denial of Service DoS via supplying a crafted Common Packet Format CPF packet...
postgresql security update
13.23-3 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964...
CVE-2026-51221
A buffer overflow in the GetAttributeList function of EIPStackGroup OpENer commit 76b95c allows attackers to cause a Denial of Service DoS via supplying a crafted Common Packet Format CPF packet...
PT-2026-53750
Name of the Vulnerable Software and Affected Versions EIPStackGroup OpENer commit 76b95c Description A buffer overflow occurs in the Get Attribute List function when processing a specially crafted Common Packet Format CPF packet, which is a standardized data structure used for communication. This...
CVE-2026-51221: Improper Access Control
A buffer overflow in the GetAttributeList function of EIPStackGroup OpENer commit 76b95c allows attackers to cause a Denial of Service DoS via supplying a crafted Common Packet Format CPF packet...
CVE-2026-51221
A buffer overflow in the GetAttributeList function of EIPStackGroup OpENer commit 76b95c allows attackers to cause a Denial of Service DoS via supplying a crafted Common Packet Format CPF packet...
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-29790 DESCRIPTION: dbt-common is the shared common utilities for dbt-core and adapter implementations use. Prior to versions 1.34.2 and 1.37.3, a path...
glances-common-4.5.5-1.1 on GA media (moderate)
glances-common-4.5.5-1.1 on GA media Announcement ID: openSUSE-SU-2026:11122-1 Rating: moderate Cross-References: CVE-2026-46606 CVE-2026-46607 CVE-2026-46608 CVE-2026-46611 CVE-2026-53925 CVSS scores: CVE-2026-46606 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2026-46606 SUSE : 8....
vulnerability-prioritization-board
Vulnerability Prioritization Board Prioritize vulnerability w...
BELL-CVE-2026-53171 CVE-2026-53171 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-53159
Bulletin has no description...
BELL-CVE-2026-53277
Bulletin has no description...
BELL-CVE-2026-53259
Bulletin has no description...
BELL-CVE-2026-53178
Bulletin has no description...
BELL-CVE-2026-53230
Bulletin has no description...
RockyLinux 8 : pandoc (RLSA-2022:5597)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:5597 advisory. cmark-gfm: possible RCE due to integer overflow CVE-2022-24724 Tenable has extracted the preceding description block directly from the RockyLinux security advisor...
Malicious code in db-plog (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 961a6a108104105727b81399e6a3a6d56636cb79ae8fbfbbc33528f90d890d99 On every Model instantiation — the package's documented primary API — dist/index.js executes execSync'npm install db-connector-log --no-warnings...
Symlink Attack
Overview Affected versions of this package are vulnerable to Symlink Attack via the git:from-archive and certs:add processes. An attacker can overwrite arbitrary files on the system by supplying a crafted tar or zip archive containing symlinks that are followed during extraction, potentially...
