PT-2026-78996

A security flaw has been discovered in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. The impacted element is the function CipAttribute::GetAttrData/CipAttribute::SetAttrData of the file ciptypes.h of the component Generic Attribute Logic. Performing a manipulation results in memory...

PT-2026-79001

A weakness has been identified in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. This affects the function CipConnMgrClass::forward open of the file cipconnectionmanager.cc of the component ForwardOpen Handler. Executing a manipulation of the argument product code can lead to...

PT-2026-78896

Name of the Vulnerable Software and Affected Versions vsDesk versions prior to 14.0101 Description The application uses a weak and predictable method based on the request timestamp to generate names for uploaded files. This flaw allows a remote attacker to guess or brute-force the generated...

PT-2026-79002

A security vulnerability has been detected in liftoff-sr CIPster 1802525be27d33e19a9a83c163e331a1d13b1892. This impacts an unknown function of the file source/src/enet encap/encap.cc of the component TCP Encapsulation Receive Path. The manipulation leads to out-of-bounds read. The attack can be...

Virtuozzo Infrastructure 7.3 Update 1 Hotfix 3 (7.3.1-66)

This update provides security fixes. Vulnerability id: VSTOR-140619 A security fix for CVE-2026-64531. Vulnerability id: VSTOR-140678 A security fix for CVE-2026-64561...

Linux Distros Unpatched Vulnerability : CVE-2026-73638

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Imager versions from 0.4502 before 1.035 for Perl read outside the EXIF block via unchecked start offsets in tiffloadifd. tiffloadifd validates an IFD entry's...

Linux Distros Unpatched Vulnerability : CVE-2026-54330

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the Ceph Object Gateway R...

Authorization Bypass Through User-Controlled Key

Overview org.springframework.data:spring-data-rest-core is a Spring Data REST. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the PATCH process. An attacker can overwrite identifier and version properties by sending crafted RFC 6902 JSON...

Linux Distros Unpatched Vulnerability : CVE-2026-64728

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A permissions issue was addressed with improved validation. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS...

Linux Distros Unpatched Vulnerability : CVE-2025-30156

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ceph is an open-source distributed storage platform providing object, block, and file storage. In versions prior to 20.2.4 and 19.2.6, the CephX authentication...

Linux Distros Unpatched Vulnerability : CVE-2026-64730

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The issue was addressed with improved UI. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6...

Linux Distros Unpatched Vulnerability : CVE-2026-65611

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nnn does not sanitize the path variable. An attacker can create a directory on a shared filesystem, removable media, or inside an extracted archive whose name...

PT-2026-80731

Name of the Vulnerable Software and Affected Versions Velero versions prior to 1.18.1 Description An attacker who gains control of the backup object-storage backend can upload a malicious backup tarball. This tarball can contain parent-directory paths that allow files to escape the intended...

Linux Distros Unpatched Vulnerability : CVE-2026-76879

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - C12.22 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service CVE-2026-76879 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2026-71131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable...

cve-2026-47849 - HIGH - Spring Data REST allows mutation of identifier and version properties via JSON Patch

cve-2026-47849 - HIGH - Spring Data REST allows mutation of identifier and version properties via JSON Patch...

Linux Distros Unpatched Vulnerability : CVE-2026-65609

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nnn is vulnerable to Out-of-Bound write vulnerability. Due to lack of validation of attacker-controlled length fields deserialized from a session file, a crafte...

mysql:8.4 security, bug fix, and enhancement update

mecab 0.996-3.4 - Bump version for package rebuild We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo - Resolves: 2182069 0.996-3.3 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz1991688 0.996-3.2 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related:...

Photon OS 5.0: Gawk PHSA-2026-5.0-91-0966

An update of the gawk package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0966. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Virtuozzo Hybrid Infrastructure 7.1 Hotfix 4 (7.1.0-205)

This update provides security fixes. Vulnerability id: VSTOR-130225 A security fix for CVE-2026-31431. Vulnerability id: VSTOR-130767 Security fixes for CVE-2026-43284 and CVE-2026-43500. Vulnerability id: VSTOR-131868 A security fix for CVE-2026-46333. Vulnerability id: VSTOR-132074 A security f...