52994 matches found
Fedora 44 : gdk-pixbuf2 (2026-001de57d4f)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-001de57d4f advisory. Fixes https://access.redhat.com/security/cve/CVE-2026-81893 Tenable has extracted the preceding description block directly from the Fedora security advisory...
Linux Distros Unpatched Vulnerability : CVE-2026-84141
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...
Oracle Linux 9 : ELSA-2026-62143-0: / wget (ELSA-2026-621430)
The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-621430 advisory. - Fix CVE-2026-58471: buffer overflow in convertfname Tenable has extracted the preceding description block directly from the Oracle Linux security...
Linux Distros Unpatched Vulnerability : CVE-2026-82209
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute...
Security update for gegl (important)
openSUSE security update: security update for gegl ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21731-1 Rating: important References: bsc1276229 Cross-References: CVE-2026-18300 CVSS scores: CVE-2026-18300 SUSE : 7.8...
UBUNTU-CVE-2026-16658
Unknown description...
Linux Distros Unpatched Vulnerability : CVE-2026-84136
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Other issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...
Linux Distros Unpatched Vulnerability : CVE-2026-16658
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...
Fedora 44 : python-llm (2026-4f3301f569)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4f3301f569 advisory. Update to latest upstream release python llm 0.33 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
Linux Distros Unpatched Vulnerability : CVE-2026-84639
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird...
Form submission data binding can set static fields
Jenkins uses the https://github.com/jenkinsci/staplerStapler web framework for HTTP request handling. In Stapler 2107.v8dfcbe8ed317 and earlier, except 2088.2093.vd7c3e58008a6, included in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, form data binding allows setting public static fields of...
CGA-4GHX-WHWW-69P9
Bulletin has no description...
CVE-2026-84372
creationtimestamp| type| source ---|---|--- 2026-09-01 21:43:11+00:00| seen| https://bsky.app/profile/suriq.io/post/3muifb2ywsm2v 2026-09-01 23:01:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muijmrq6t52e 2026-09-02 00:07:37+00:00| seen|...
MINI-VFGW-HMXH-5M46
Bulletin has no description...
MINI-FXF7-8RV8-VV2V
Bulletin has no description...
CVE-2021-38671
creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:22+00:00| seen| https://t.me/hackingAttack/23975 2026-09-02 01:02:52+00:00| seen| https://t.me/hackingAttack/23975 2026-09-07 15:00:06+00:00| seen| https://t.me/hackingAttack/23975 2026-09-08 00:00:41+00:00| seen|...
GHSA-2M8G-3CMR-WG3W Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`
Summary While investigating Django REST Framework's request parsing behavior, I identified that DRF's high-level request.data parsing appears to bypass Django's configured DATAUPLOADMAXMEMORYSIZE protection for application/json and application/x-www-form-urlencoded request bodies. In the tested...
Injection fast-uri Dependency in Jira Service Management Data Center
This High severity Injection vulnerability was introduced in versions 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Service Management Data Center. This Injection vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...
CVE-2026-18931
creationtimestamp| type| source ---|---|--- 2026-09-01 16:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muhuuzdtt625 2026-09-01 18:08:12+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muhzantma525...