137130 matches found
MiracleLinux 9 : perl-DBI-1.643-9.el9_8.5 (AXSA:2026-1822:04)
The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-1822:04 advisory. DBI: Incomplete fix for CVE-2026-14380 DBI: Arbitrary code execution via caller-influenced Profile attribute CVE-2026-19546 Tenable has extracted the precedi...
PT-2026-91047
The ca-certificates package before ca-certificates-2021.2.50-72 for Amazon Linux 2 AL2 does not properly remove certain TrustCor root certificates from the root store. NOTE: this issue exists because of an incorrect fix for CVE-2022-23491...
RHEL 9 : RHEL AI 3.5 RPM runtime CVE fix - ffmpeg (Important) (RHSA-2026:67303)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67303 advisory. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...
CVE-2026-90601
A vulnerability was found in getzep graphiti up to 0.30.2. Affected is an unknown function of the file server/graphservice/main.py of the component REST API. The manipulation results in improper authentication. The attack can be launched remotely. The pull request to fix this issue awaits...
CLSA-2026-1789292187 TuxCare security update for com.fasterxml.jackson.core:jackson-databind (2 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 2 CVEs. Fixed in 2.17.3-tuxcare.1...
CLSA-2026-1789289706 TuxCare security update for fast-xml-parser (1 CVE)
TuxCare rebuilt fast-xml-parser to address 1 CVE. Fixed in 4.5.1-tuxcare.1...
CLSA-2026-1789285409 TuxCare security update for org.springframework.data:spring-data-ldap (1 CVE)
TuxCare rebuilt org.springframework.data:spring-data-ldap to address 1 CVE. Fixed in 3.3.13-tuxcare.5...
PT-2026-90985
A vulnerability was found in getzep graphiti up to 0.30.2. Affected is an unknown function of the file server/graph service/main.py of the component REST API. The manipulation results in improper authentication. The attack can be launched remotely. The pull request to fix this issue awaits...
CLSA-2026-1789228075 TuxCare security update for io.micrometer (1 CVE)
TuxCare rebuilt 33 io.micrometer packages to address 1 CVE. Fixed in 1.13.15-tuxcare.1...
CLSA-2026-1789225570 TuxCare security update for org.springframework.data:spring-data-commons (1 CVE)
TuxCare rebuilt org.springframework.data:spring-data-commons to address 1 CVE. Fixed in 3.3.13-tuxcare.6...
CLSA-2026-1789219944 TuxCare security update for io.netty (2 CVEs)
TuxCare rebuilt 47 io.netty packages to address 2 CVEs. Fixed in 4.1.108.Final-tuxcare.2...
CLSA-2026-1789219941 TuxCare security update for io.netty (1 CVE)
TuxCare rebuilt 47 io.netty packages to address 1 CVE. Fixed in 4.1.117.Final-tuxcare.4...
CLSA-2026-1789213301 TuxCare security update for org.bouncycastle (1 CVE)
TuxCare rebuilt 39 org.bouncycastle packages to address 1 CVE. Fixed in 1.78.1-tuxcare.6...
CLSA-2026-1789201689 TuxCare security update for commons-configuration:commons-configuration (1 CVE)
TuxCare rebuilt commons-configuration:commons-configuration to address 1 CVE. Fixed in 1.10-tuxcare.2...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: dotnet10.0: aspnetcore-runtime-10.0-10.0.12-1.hum1 aarch64, x8664 aspnetcore-runtime-dbg-10.0-10.0.12-1.hum1 aarch64, x8664 aspnetcore-targeting-pack-10.0-10.0.12-1.hum1 aarch64, x8664...
MGASA-2026-0395 Updated java-21-openjdk & java-17-openjdk packages fix security vulnerabilities
Enhance TLS certificate handling. CVE-2026-46968 Improve DTLS handshaking. CVE-2026-46917 Enhance JPEG handling. CVE-2026-47010 Enhance XBM image support. CVE-2026-47021 Enhance Jar file processing. CVE-2026-47027 Improve certification checking. CVE-2026-60147 Enhance AWT ImagingLib. CVE-2026-470...
OPENSUSE-SU-2026:11765-1 docker-29.7.2_ce-41.1 on GA media
These are all security issues fixed in the docker-29.7.2ce-41.1 package on the GA media of openSUSE Tumbleweed...
Linux Distros Unpatched Vulnerability : CVE-2026-78030
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbmtype and dbmmldbm attributes in DBD::DBM. DBD::DBM passes the dbmtype and dbmmldbm...