Security Bulletin: This Power System update is being released to address CVE-2026-17511

Summary Power Systems Firmware is affected by a vulnerability in the partition resource dump interface. An attacker with authenticated administrator-level access to the HMC or service processor can obtain a limited snapshot of partition processor state. Successful exploitation results in a...

Security Bulletin: This Power System update is being released to address CVE-2026-17503

Summary Power Systems Firmware is affected by a vulnerability in the partition firmware runtime boot configuration. An attacker with root access to a partition can maliciously alter partition nvram, causing the partition to fail to boot. This condition persists until operator intervention —...

CVE-2024-3094

CVE-2024-3094...

CVE-2025-55182

This repository does not have a README...

CVE-Smackdown

Hola, aquí es donde llevaremos a cabo actividades nefandas...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.48 bug fix and security update

Red Hat OpenShift Container Platform release 4.19.48 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...

ROS-20260923-73-0006

The vulnerability of the sctpgetsockoptpeerauthchunks function in the net/sctp/socket.c module of the Linux operating system’s SCTP protocol implementation is related to an incorrect calculation of the buffer size. Exploiting this vulnerability could allow a attacker to compromise the...

Fedora 43 : cyrus-imapd (2026-97a7ec5786)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-97a7ec5786 advisory. - New version 3.10.4 rhbz2500822 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...

Oracle Linux 9 : runc (ELSA-2026-70191)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-70191 advisory. - rebuild for CVE-2026-56860 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

CVE-2016-0728

CVE-2016-0728...

CVE-2026-93990

A flaw was found in Expat. This vulnerability allows a remote attacker to send specially crafted UTF-16 encoded XML data. Due to improper validation of surrogate characters, the parser can be tricked into accepting malformed sequences, which can hide legitimate markup characters. This could enabl...

CVE-2026-95805 MISP ACLComponent: Typo in previewEventAttributes ACL key bypasses intended access restriction

A typo in the MISP ACLComponent access control configuration caused the ACL rule for the previewEventAttributes action to reference the permission string 'themingenabled' with a trailing asterisk instead of the correct 'themingenabled'. In the MISP ACL system, the array values define which role o...

CVE-2021-28235

Este repositorio no tiene un README...

CVE-2017-8481

This repository does not have a README...

CVE-2026-93952: Improper Input Validation

VeloCloud Orchestrator VCO on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability of the orchestrator and data managed by...

CVE-2026-95658: Cross-Site Request Forgery (CSRF)

MISP's WorkflowsController exposed the moduleStatelessExecution action in the Security component's unlockedActions list. In CakePHP, listing an action in unlockedActions disables both the CSRF token check and the field hash validation for that action. Because moduleStatelessExecution executes a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000561)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000561 advisory. Out-of-bounds Write in GitHub repository vim/vim prior to 8.2. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000537)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000537 advisory. Use After Free in GitHub repository vim/vim prior to 9.0.0046. Tenable has extracted the preceding description block directly from the Unity Linux security advisory...

Oracle Linux 9 : openexr (ELSA-2026-69608)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-69608 advisory. 3.1.1-3.4 - fix CVE-2026-68515 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000533)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000533 advisory. NULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959. Tenable has extracted the preceding description block directly from the Unity Linux security...