Linux Distros Unpatched Vulnerability : CVE-2026-1764

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GNOME localsearch previously known as tracker-miners MP3 Extractor. When processing specially crafted MP3 files containing ID3v2.4 tags, a...

Linux Distros Unpatched Vulnerability : CVE-2026-1285

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. django.utils.text.Truncator.chars and Truncator.words methods with...

Linux Distros Unpatched Vulnerability : CVE-2026-1766

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GNOME localsearch previously known as tracker-miners MP3 Extractor, specifically within the tracker-extract-mp3 component. This heap buffer...

GO-2026-4352 OpenTofu has High CPU usage in "tofu init" with maliciously-crafted module packages in .zip format in github.com/opentofu/opentofu

OpenTofu has High CPU usage in "tofu init" with maliciously-crafted module packages in .zip format in github.com/opentofu/opentofu...

CVE-2025-55130 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2016-1906 vulnerabilities

Vulnerabilities for packages: kubernetes...

GHSA-7JQF-V358-P8G7 vulnerabilities

Vulnerabilities for packages: tomcat...

GHSA-CR35-G722-63Q3 vulnerabilities

Vulnerabilities for packages: linux-vmware, linux-aws, linux-qemu, linux-gcp, linux-azure...

Security Bulletin: The IBM Maximo Application Suite AI-Service component uses multiple third-party dependencies that contain vulnerabilities associated with multiple CVEs.

Summary The IBM Maximo Application Suite AI-Service component uses"fonttools-4.44.3-cp311-cp311-manylinux217x8664.manylinux2014x8664.whl, fonttools-4.55.3-cp311-cp311-manylinux217x8664.manylinux2014x8664.whl, werkzeug-3.0.6-py3-none-any.whl, filelock-3.13.4-py3-none-any.whl,...

Fedora: Security Advisory (FEDORA-2026-ce64e86fd8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2026-1703

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal is...

Linux Distros Unpatched Vulnerability : CVE-2024-22029

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insecure permissions in the packaging of tomcat allow local users that win a race during package installation to escalate to root CVE-2024-22029 Note that Nessu...

Debian: Security Advisory (DSA-6117-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AlmaLinux 8 : python3 (ALSA-2026:1631)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:1631 advisory. cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service CVE-2025-12084 Tenable has extracted the preceding description block...

Ubuntu: Security Advisory (USN-7990-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-G9Q4-QJX4-2V7Q vulnerabilities

Vulnerabilities for packages: terraform, flux-fips, k9s-fips, osv-scanner, xeol, redka, gosu, timoni, cert-manager-cmctl-fips, ingress-nginx-controller-fips, etcd-fips, croc, cilium-envoy-fips, kubevela-fips, external-dns, chaos-mesh-fips, grafana-fips, consul, cosign, kube-conformance,...

CVE-2026-1699

In the Eclipse Theia Website repository, the GitHub Actions workflow .github/workflows/preview.yml used pullrequesttarget trigger while checking out and executing untrusted pull request code. This allowed any GitHub user to execute arbitrary code in the repository's CI environment with access to...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: maru, spire-server, sftpgo-plugin-geoipfilter, yunikorn-k8shim, crossplane-provider-aws-cloudfront, helm-operator, lazygit, dbmate, tofu-controller, azure-service-operator, chart-testing, gitleaks, doppler-kubernetes-operator, kubernetes-csi-driver-nfs,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: maru, spire-server, sftpgo-plugin-geoipfilter, yunikorn-k8shim, crossplane-provider-aws-cloudfront, helm-operator, lazygit, dbmate, tofu-controller, azure-service-operator, chart-testing, gitleaks, doppler-kubernetes-operator, kubernetes-csi-driver-nfs,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: percona-server-mongodb-operator, azcopy, cluster-api-ipam-provider-in-cluster, kubernetes-replicator-fips, falcosidekick-fips, longhorn-instance-manager, azure-container-networking, cilium-envoy-fips, crossplane-provider-gitlab, crossplane-provider-gcp-fips,...