53042 matches found
DEBIAN-CVE-2026-63072
Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap write. Impact summary: An attacker who supplies a...
CGA-2WVV-F426-MVHH
Bulletin has no description...
CGA-4W9M-26CR-5Q62
Bulletin has no description...
CGA-77J4-67H5-HP9V
Bulletin has no description...
CVE-2026-45134
A flaw was found in the LangSmith Client SDKs. This vulnerability allows an external attacker to control the content of prompt manifests when a user pulls a public prompt from the LangSmith Hub. By exploiting the deserialization of untrusted data, an attacker could achieve high confidentiality...
RHSA-2026:58897 Red Hat Security Advisory: firefox security update
Bulletin has no description...
MINI-VFCV-CFX9-22XG
Bulletin has no description...
CVE-2026-74612
creationtimestamp| type| source ---|---|--- 2026-08-25 06:40:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtv7jrzsu72p...
EUVD-2026-65191
SAP S/4HANA Private Cloud uses a third-party component that contains a Regular Expression Denial of Service ReDoS vulnerability. An unauthenticated attacker could supply specially crafted input that triggers excessive processing within the affected functionality. Successful exploitation could...
lib/crypto/arm64/poly1305-glue.c Heap Buffer Overflow DoS
The vulnerability of the poly1305blocksarch function in the lib/crypto/arm64/poly1305-glue.c module of the Linux operating system is related to an attempt to read inaccessible registers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
Fedora 44 : calibre (2026-9f2b45e4c1)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9f2b45e4c1 advisory. Update to 9.13.0. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...
Oracle Linux 7 : libreoffice (ELSA-2026-46386)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-46386 advisory. - Backport fix for CVE-2026-4430 Orabug: 39791243 - Backport fix for CVE-2026-8357 Orabug: 39791243 Tenable has extracted the preceding description...
Oracle Linux 9 : sqlite (ELSA-2026-58936)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-58936 advisory. - Fixes CVE-2026-11822 - Fixes CVE-2026-11824 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...
JetBrains TeamCity < 2021.1.1 (CVE-2021-37545)
The version of JetBrains TeamCity installed on the remote host is prior to 2021.1.1. It is, therefore, affected by a vulnerability: - In JetBrains TeamCity before 2021.1.1, insufficient authentication checks for agent requests were made. CVE-2021-37545 Note that Nessus has not tested for this iss...
JetBrains TeamCity < 2020.1.2 (CVE-2020-27627)
The version of JetBrains TeamCity installed on the remote host is prior to 2020.1.2. It is, therefore, affected by a vulnerability: - JetBrains TeamCity before 2020.1.2 was vulnerable to URL injection. CVE-2020-27627 Note that Nessus has not tested for this issue but has instead relied only on th...
net/rxrpc/rxgk.c Kernel Session Compromise
The vulnerability of the rxgkdoverifyauthenticator function in the net/rxrpc/rxgk.c module relates to the execution of operations outside of the buffer in the memory of the Linux operating system’s kernel. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and...
arch/arm64/kvm/at.c Heap Buffer Overflow DoS
The vulnerability of the kvmatswapdesc function in the arch/arm64/kvm/at.c module of the virtualization subsystem on the ARM 64-bit kernel of the Linux operating system is related to errors during pointer scaling. Exploiting this vulnerability could allow an attacker to compromise the...
Linux kernel cryptographic accelerator driver Heap Buffer Overflow DoS
The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
Linux io_uring Heap Buffer Overflow DoS
The vulnerability of the ioregisterresizerings function in the iouring/register.c module of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...