Oracle Linux 7 : libreoffice (ELSA-2026-46386)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-46386 advisory. - Backport fix for CVE-2026-4430 Orabug: 39791243 - Backport fix for CVE-2026-8357 Orabug: 39791243 Tenable has extracted the preceding description...

JetBrains TeamCity < 2021.1.1 (CVE-2021-37545)

The version of JetBrains TeamCity installed on the remote host is prior to 2021.1.1. It is, therefore, affected by a vulnerability: - In JetBrains TeamCity before 2021.1.1, insufficient authentication checks for agent requests were made. CVE-2021-37545 Note that Nessus has not tested for this iss...

JetBrains TeamCity < 2020.1.2 (CVE-2020-27627)

The version of JetBrains TeamCity installed on the remote host is prior to 2020.1.2. It is, therefore, affected by a vulnerability: - JetBrains TeamCity before 2020.1.2 was vulnerable to URL injection. CVE-2020-27627 Note that Nessus has not tested for this issue but has instead relied only on th...

CGA-7QV8-V97Q-VWR2

Bulletin has no description...

CGA-6QMG-GP5F-8VXR

Bulletin has no description...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an out-of-bounds read in onnx [CVE-2026-14647]

Summary IBM Watson Speech Services Cartridge is vulnerable to an out-of-bounds read in onnx that affects the function convPoolShapeInferenceopset19 of the file onnx/defs/nn/old.cc of the component onnxruntime CVE-2026-14647. Onnx is used as part of our service runtimes. This vulnerability has bee...

CVE-2026-59651

A flaw was found in Bouncy Castle for Java. The BKS keystore, which is used for storing cryptographic keys, accepts legacy versions that utilize a 16-bit integrity Message Authentication Code MAC key. This weak integrity protection could allow an attacker to tamper with the keystore's contents...

CVE-2026-78541

creationtimestamp| type| source ---|---|--- 2026-08-24 20:55:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dowivm2uegf5b 2026-08-25 01:49:19+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtupbsljrs26 2026-08-25 16:45:05+00:00| seen|...

K000163067: Apache Thrift vulnerabilities CVE-2026-48586 and CVE-2026-55969

Security Advisory Description CVE-2026-48586 Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes th...

MAL-2026-15687 Malicious code in @yuva2210/okx-poc-rce-impact (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1917fdda46d566300463afdd1087755e9cf50203f4997455f9ee888e01782124 @yuva2210/[email protected] is a dependency-confusion proof-of-concept targeting OKX's internal namespace. The package's package.json declares...

Malicious code in @yuva2210/okx-poc-rce-impact (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1917fdda46d566300463afdd1087755e9cf50203f4997455f9ee888e01782124 @yuva2210/[email protected] is a dependency-confusion proof-of-concept targeting OKX's internal namespace. The package's package.json declares...

MINI-PRC8-548X-VVQP

Bulletin has no description...

MINI-35RG-GHRF-6Q5W

Bulletin has no description...

MINI-C954-5277-GH5J

Bulletin has no description...

MINI-GH8P-62HX-93R5

Bulletin has no description...

MINI-7MWF-RJ95-M3CF

Bulletin has no description...

CVE-2026-72854

A flaw was found in msgpack-c. An integer overflow vulnerability exists in the msgpackunpackerexpandbuffer function. This flaw can lead to an undersized memory buffer being allocated, even though the system reports a successful reservation. If an attacker can influence the length provided to the...

Astra Linux – Vulnerability in Linux, Linux 5.10

A use-after-free flaw was discovered in the Linux kernel’s Amateur Radio AX.25 protocol functionality, regarding the way users connect with the protocol. This flaw allows a local user to crash the system...

dotnet: .NET: Denial of Service due to uncontrolled resource allocation

A flaw was found in .NET where uncontrolled allocation of resources can lead to a Denial of Service DoS. An unauthorized remote attacker could exploit this vulnerability by continuously requesting resources without limits or throttling, causing the affected system to become unresponsive or crash...

GLSA-202608-22 : needrestart: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202608-22 needrestart: Multiple vulnerabilities Multiple vulnerabilities have been discovered in needrestart. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block...