630004 matches found
Oracle Linux 9 : ELSA-2026-65886-0: / image-builder (ELSA-2026-658860)
The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-658860 advisory. 72.0.0-1.0.2 - Rebuild to fix CVE-2026-32280, CVE-2026-32281, CVE-2026-33811, CVE-2026-33818, CVE-2026-39820, CVE-2026-39821, CVE-2026-42499,...
Linux Distros Unpatched Vulnerability : CVE-2026-46352
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to...
image-builder security update
72.0.0-1.0.2 - Rebuild to fix CVE-2026-32280, CVE-2026-32281, CVE-2026-33811, CVE-2026-33818, CVE-2026-39820, CVE-2026-39821, CVE-2026-42499, CVE-2026-42504, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862...
Fedora 45 : memcached (2026-fb82981047)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-fb82981047 advisory. Rebase to 1.6.45 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...
Fedora 45 : freerdp (2026-d2a288c8eb)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d2a288c8eb advisory. Update to 3.31.1 ---- Update to 3.31.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...
Oracle Linux 9 : ELSA-2026-65153-0: / osbuild-composer (ELSA-2026-651530)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-651530 advisory. 175-1.0.2 - Rebuild to fix CVE-2026-33818, CVE-2026-39820, CVE-2026-39821, CVE-2026-42499, CVE-2026-42504, CVE-2026-56853, CVE-2026-56858,...
Fedora 45 : gdk-pixbuf2 (2026-f55d6fc9f8)
The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f55d6fc9f8 advisory. Fixes https://access.redhat.com/security/cve/CVE-2026-81893 ---- Fixes CVE-2026-16768: https://access.redhat.com/security/cve/CVE-2026-16768 Tenable...
PT-2026-90141
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds heap read exists in the hp-bioscfg component of the x86 platform. The function hp init bios package attribute validates the obj-package.count but subsequently calls hp...
CVE-2026-49836
psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, SmartObject.save writes an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled and unsanitised, a tool that extracts embedded objects from an...
CVE-2026-49836
psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, SmartObject.save writes an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled and unsanitised, a tool that extracts embedded objects from an...
CVE-2026-49836 psd-tools: arbitrary file write via smart-object filename
psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, SmartObject.save writes an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled and unsanitised, a tool that extracts embedded objects from an...
hubzoid (>=0.7.15, <=0.9.6) potentially affected by CVE-2026-87015 via open-webui (0.11.0)
open-webui PYPI version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - hubzoid =0.7.15, =0.9.6 Source cves: CVE-2026-87015 Source advisory: SNYK:PYTHON-OPENWEBUI-20158702...
NPM: OmniRoute ACP Custom-Agent Remote Code Execution (RCE)
NPM: OmniRoute ACP Custom-Agent Remote Code Execution RCE vulnerability discovered by ? in WordPress Npm omniroute versions = 3.8.50...
NPM: n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution
NPM: n8n: Per-Resource OAuth Consent Bypass via Unbound Refresh Token Resource Substitution vulnerability discovered by ? in WordPress Npm n8n versions 2.37.7...
NPM: n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Service
NPM: n8n: Prototype Pollution via Workflow Structure Summary Can Lead to Denial of Service vulnerability discovered by ? in WordPress Npm n8n versions 2.37.7...
@africanies/angular-web-sdk (>=0.1.0, <=0.1.27), @angelmartz/template-drawer-navigation-ng (9.1.0) +16 more potentially affected by CVE-2026-88059 via @angular/common (>=22.0.0, <=22.0.8)
@angular/common NPM version =22.0.0, =0.1.0, =6.1.210-alpha, =6.1.210-alpha, =0.0.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =9.1.0, =0.0.0, =0.0.0-workstream-forge.3, =0.0.0-workstream-forge.12, =0.0.0-workstream-forge.31 and more Source cves: CVE-2026-88059 Source advisory:...
EUVD-2026-75709
The cstruct package before 6.3.0 for OCaml mishandles indexes...
CVE-2026-89086
CVE-2026-89086 affects the jose package for OCaml, versions before 0.11.0. The vulnerability lies in RSA signature validation: library calls only confirm that PKCS #1 decoding succeeds and then declare the signature valid, skipping the required steps that involve the public key . This means a mal...
