CLSA-2026-1775003174 TuxCare security update for underscore.string (6 CVEs)

TuxCare rebuilt underscore.string to address 6 CVEs. Fixed in 2.3.3-tuxcare.1...

CLSA-2026-1773360975 TuxCare security update for ms (18 CVEs)

TuxCare rebuilt ms to address 18 CVEs. Fixed in 0.3.0-tuxcare.1...

CLSA-2026-1773274564 TuxCare security update for tunnel-agent (2 CVEs)

TuxCare rebuilt tunnel-agent to address 2 CVEs. Fixed in 0.4.3-tuxcare.1...

CLSA-2026-1772928825 TuxCare security update for debug (6 CVEs)

TuxCare rebuilt debug to address 6 CVEs. Fixed in 2.3.3-tuxcare.1...

PT-2026-67131

The User Access Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.15 via the 'uamgetfile' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain...

Atlassian Confluence 9.0.1 / 9.1.x / 9.2.x < 9.2.17 / 9.3.1 / 9.4.x / 9.5.1 / 10.0.2 / 10.1.x / 10.2.x < 10.2.7 (CONFSERVER-104334)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104334 advisory. - This High severity DoS Denial of Service vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and...

CLEANSTART-2026-HW41013 Security fixes in postgresql15 15.3-r0

Package postgresql15 version 15.3-r0 fixes 2 vulnerabilities: CVE-2023-2454, CVE-2023-2455...

CLEANSTART-2026-BB26789 Security fixes in spark-operator 2.3.0-r3

Package spark-operator version 2.3.0-r3 fixes 4 vulnerabilities: CVE-2026-32281, CVE-2026-32288, CVE-2026-32289, CVE-2026-32280...

EUVD-2026-50965

A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM. The vulnerability occurs because user-controlled input is not properly validated before being decoded and copied into a fixed-size stack buffer. An authenticated attacker can exploit this issue to cause denial ...

CVE-2026-67245 A path traversal vulnerability was found in the VPN Clients on the ADM

A path traversal vulnerability was found in the VPN Clients on the ADM. The vulnerability occurs because user-controlled certificate name input is not sufficiently validated before being used to construct the upload destination path. An authenticated attacker can exploit this issue to write an...

CVE-2026-67244

A format string vulnerability in ADM’s Notification OAuth settings is triggered by user-controlled notification configuration input that is processed via an unsafe format-string operation. Exploitation requires authenticated administrator privileges and can disclose memory information or cause de...

CVE-2026-66434

Contributor Cross Site Scripting XSS in Photonic Gallery & Lightbox for Flickr, SmugMug & Others = 3.33 versions...

Fedora 44 : lego (2026-30e8e9a2b2)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-30e8e9a2b2 advisory. Update to 5.3.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

SUSE-SU-2026:22938-1 Security update for runc

This update for runc fixes the following issues: Update to 1.3.6. - CVE-2026-41579: malicious image with a /dev symlink can trigger limited host filesystem integrity violations bsc1268275. Other updates and bugfixes: - Version 1.3.6: Various integration test improvements. When masking directories...

CVE-2026-65521

Unauthenticated Sensitive Data Exposure in WP Social Ninja = 4.3.0 versions...

EUVD-2026-48186

Subscriber Cross Site Scripting XSS in Masteriyo - LMS = 2.3.0 versions...

EUVD-2026-47423

Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications component: RTP Proxy. The supported version that is affected is 8.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle...

EUVD-2026-47377

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Security. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Agile PLM executes to compromise Oracle Agile PL...

CVE-2026-61226

Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications component: RTP Proxy. The supported version that is affected is 8.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle...

CVE-2026-61173

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Security. The supported version that is affected is 9.3.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this...