FreeBSD : Gitlab -- vulnerabilities (3f11e437-b7cd-11f1-a883-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 3f11e437-b7cd-11f1-a883-2cf05da270f3 advisory. Gitlab reports: Double Free issue in Regular Expression Parser impacts GitLab CE/EE Integer...

Oracle Linux 9 : ipa (ELSA-2026-70564)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-70564 advisory. - RHEL-218866 CVE-2026-18147 ipa: FreeIPA/IdM: Cross-Site Scripting vulnerability allows arbitrary code execution via crafted URL rhel-9.8.z -...

Linux Distros Unpatched Vulnerability : CVE-2026-79311

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - webpy web.py 0.76 is vulnerable to Cross Site Scripting XSS via renderjinja.init. CVE-2026-79311 Note that Nessus relies on the presence of the package as...

LibreNMS XSS

The vulnerability of the LibreNMS network monitoring system’s sceenario/include/html/print-vrf.inc.php file is related to deficiencies in the encapsulation process when processing fields such as vrfname, mplsVpnVrfDescription, and mplsVpnVrfRoute. Exploiting this vulnerability allows a remote...

LibreNMS XSS

The vulnerability of the LibreNMS network monitoring system is related to deficiencies in the blocking procedures. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

LibreNMS SNMP Unauthorized Access Cross-site

The vulnerability of the SNMP protocol implementation in the LibreNMS network monitoring system is related to deficiencies in the process of blocking outdated PHP templates. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information and perform...

RockyLinux 9 : ipa (RLSA-2026:70564)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:70564 advisory. ipa: FreeIPA: Unauthenticated DoS in /ipa/i18nmessages via Unbounded Request Body Read CVE-2026-73198 ipa: FreeIPA: Unauthenticated DoS in...

RHEL 9 : ipa (RHSA-2026:70564)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70564 advisory. Red Hat Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and...

AlmaLinux 9 : buildah (ALSA-2026:70640)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:70640 advisory. buildah: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service CVE-2026-56853 buildah: Go html/template: Cross-Site Scripting via...

RockyLinux 9 : skopeo (RLSA-2026:70641)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:70641 advisory. skopeo: Go html/template: Cross-Site Scripting via pathological input CVE-2026-56858 skopeo: Go encoding/asn1: Denial of Service via excessive recursion...

MiracleLinux 9 : containernetworking-plugins-1.9.0-4.el9_8 (AXSA:2026-1906:04)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1906:04 advisory. encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 net/url: golang: golang net/url: Deni...

MiracleLinux 9 : podman-5.8.2-7.el9_8 (AXSA:2026-1908:10)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1908:10 advisory. podman: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 podman: golang net/url: Denial of Service from...

RHEL 9 : skopeo (RHSA-2026:70641)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:70641 advisory. Command line utility to inspect images and repositories directly on Docker registries without the need to pull them. Security Fixes: skopeo...

RHCOS 4 : OpenShift Container Platform 4.16.71 (RHSA-2026:67934)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67934 advisory. - encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 - mime: golang:...

RockyLinux 9 : buildah (RLSA-2026:70640)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:70640 advisory. buildah: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service CVE-2026-56853 buildah: Go html/template: Cross-Site Scripting via...

AlmaLinux 9 : skopeo (ALSA-2026:70641)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:70641 advisory. skopeo: Go html/template: Cross-Site Scripting via pathological input CVE-2026-56858 skopeo: Go encoding/asn1: Denial of Service via excessive recursion ...

CVE-2026-96739 SEMCMS KindEditor Upload upload_json.php cross site scripting

A flaw has been found in SEMCMS up to 4.2. Affected by this issue is some unknown functionality of the file /Edit/php/uploadjson.php of the component KindEditor Upload Interface. This manipulation of the argument imgFile causes cross site scripting. The attack may be initiated remotely. The explo...

CVE-2026-96739 SEMCMS KindEditor Upload upload_json.php cross site scripting

A flaw has been found in SEMCMS up to 4.2. Affected by this issue is some unknown functionality of the file /Edit/php/uploadjson.php of the component KindEditor Upload Interface. This manipulation of the argument imgFile causes cross site scripting. The attack may be initiated remotely. The explo...

CVE-2026-96739

A cross-site scripting (XSS) vulnerability exists in SEMCMS versions up to 4.2 . The flaw is located within the KindEditor Upload Interface component, specifically affecting the functionality of the /Edit/php/upload_json.php file. The issue arises from the improper handling of the imgFile argumen...

html/template: golang: Go html/template: Cross-Site Scripting via pathological input

A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...