193738 matches found
AlmaLinux 8 : nfs-utils (ALSA-2026:3938)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:3938 advisory. nfs-utils: rpc.mountd in the nfs-utils privilege escalation CVE-2025-12801 Tenable has extracted the preceding description block directly from the AlmaLinux securi...
Striae 安全漏洞
Striae is an open-source firearm trace comparison analysis tool developed by Striae. Versions of Striae prior to v3.0.0 contained security vulnerabilities. These vulnerabilities stemmed from the digital confirmation workflow, where only hash verification was used for, and the list hash field coul...
OpenProject 安全漏洞
OpenProject is an open-source web-based project management software. Versions of OpenProject prior to 17.2.0 had security vulnerabilities. These vulnerabilities stemmed from a flaw where, when deleting budgets, the work packages assigned to those budgets were moved before the permission checks...
Linux Distros Unpatched Vulnerability : CVE-2026-26127
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network. CVE-2026-26127 Note that Nessus relies on the presence of the package...
Ubuntu: Security Advisory (USN-8059-8)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Critical Photon OS Security Update - PHSA-2026-4.0-0976
Updates of 'ruby', 'ImageMagick' packages of Photon OS have been released...
0.extends.wechat (>=1.0.51, <=1.0.65), 1-test-gulp-1 (>=0.0.1, <=0.0.4) +16157 more potentially affected by CVE-2026-31808 via file-type (>=13.0.3, <=21.3.0)
file-type NPM version =13.0.3, =1.0.51, =0.0.1, =2.2.0-alpha.0, =3.1.4, =1.0.0, =0.0.1, =1.0.0, =3.1.6, =1.0.0, =1.0.0, =0.0.1, =0.0.2, =0.6.4 and more Source cves: CVE-2026-31808 Source advisory: OSV:GHSA-5V7R-6R5C-R473...
org.webjars.npm:canvas (>=2.5.0, <=2.6.0), org.webjars.npm:color-thief (2.2.5) +12 more potentially affected by CVE-2026-31802 via org.webjars.npm:tar (>=0.1.20, <=4.4.19)
org.webjars.npm:tar MAVEN version =0.1.20, =2.5.0, =0.97.5, =0.2.0, =3.4.0, =0.6.19, =2.0.0, =3.1.4, =3.4.1 - org.webjars.npm:tar.gz 1.0.7 Source cves: CVE-2026-31802 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-15456202...
CVE-2026-23135 affecting package kernel for versions less than 6.6.126.1-1
CVE-2026-23135 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...
@228-fund/elysia-effect (0.0.1), @228-fund/elysia-msgpack (>=0.0.1, <=0.0.3) +66 more potentially affected by CVE-2026-30837 via elysia (>=1.0.9, <=1.4.22)
elysia NPM version =1.0.9, =0.0.1, =0.1.0, =0.0.1, =0.0.1, =0.1.0, =0.1.4, =0.1.0, =0.1.0-next.4, =1.0.0-next.4, =1.0.0, =0.0.1, =1.0.3, =1.0.10 and more Source cves: CVE-2026-30837 Source advisory: SNYK:JS-ELYSIA-15469934...
MGASA-2026-0054 Updated yt-dlp packages fix security vulnerability
When yt-dlp's --netrc-cmd command-line option or netrccmd Python API parameter is used, an attacker could achieve arbitrary command injection on the user's system with a maliciously crafted URL...
GHSA-J3GX-2473-5FP8 vulnerabilities
Vulnerabilities for packages: sftpgo-plugin-eventstore, temporal-server, container-object-storage-interface, argo-events, azcopy, postgres-operator, rabbitmq-default-user-credential-updater, kserve-modelmesh-serving, kube-vip-cloud-provider, kubernetes-csi-driver-hostpath,...
CVE-2026-27139 vulnerabilities
Vulnerabilities for packages: prometheus-alertmanager-fips, bank-vaults, goose, kubernetes-csi-driver-nfs, kubernetes-dashboard-fips, nfs-subdir-external-provisioner-fips, sriov-network-device-plugin-fips, crossplane-provider-sql-fips, opentelemetry-collector-contrib-fips, delve,...
CVE-2026-27142 vulnerabilities
Vulnerabilities for packages: prometheus-alertmanager-fips, bank-vaults, goose, kubernetes-csi-driver-nfs, kubernetes-dashboard-fips, sriov-network-device-plugin-fips, crossplane-provider-sql-fips, opentelemetry-collector-contrib-fips, argocd-image-updater-fips, crossplane-provider-aws-ecr,...
GHSA-J3GX-2473-5FP8 vulnerabilities
Vulnerabilities for packages: prometheus-alertmanager-fips, bank-vaults, goose, kubernetes-csi-driver-nfs, kubernetes-dashboard-fips, nfs-subdir-external-provisioner-fips, sriov-network-device-plugin-fips, crossplane-provider-sql-fips, opentelemetry-collector-contrib-fips, delve,...
CVE-2025-11143 vulnerabilities
Vulnerabilities for packages: druid, cloudwatch-exporter, solr, kafka, apache-tika, trino, akhq, confluent-kafka, dependency-track, cassandra-reaper, zookeeper, spark...
@powersync/cli-core (>=0.0.0-dev-20260305082615, <=0.9.2), @powersync/cli-plugin-config-edit (>=0.0.0-dev-20260305082615, <=0.9.2) +20 more potentially affected by CVE-2026-30870 via @powersync/service-sync-rules (>=0.0.0-dev-20240918082156, <=0.32.0)
@powersync/service-sync-rules NPM version =0.0.0-dev-20240918082156, =0.0.0-dev-20260305082615, =0.0.0-dev-20260305082615, =0.0.0-dev-20260305082615, =0.0.0-dev-20260305082615, =0.0.0-dev-20250827072023, =0.0.0-dev-20260114113449, =0.0.0-dev-20250827072023, =0.0.0-dev.57b1a567,...
EulerOS 2.0 SP13 : nasm (EulerOS-SA-2026-1254)
According to the versions of the nasm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : There exists a heap buffer overflow in nasm 2.16.02rc1 GitHub commit: b952891.CVE-2023-31722 Tenable has extracted the preceding description block...
Linux Distros Unpatched Vulnerability : CVE-2026-1940
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An incomplete fix for CVE-2024-47778 allows an out-of-bounds read in gstwavparseadtlchunk function. The patch added a size validation check lsize + 8 size, but ...
Linux Distros Unpatched Vulnerability : CVE-2026-3086
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...