2332 matches found
CLSA-2026-1780966317 TuxCare security update for io.undertow (4 CVEs)
TuxCare rebuilt 8 io.undertow packages to address 4 CVEs. Fixed in 2.3.0.Final-tuxcare.1...
CLSA-2026-1779065200 TuxCare security update for guzzlehttp/guzzle (5 CVEs)
TuxCare rebuilt guzzlehttp/guzzle to address 5 CVEs. Fixed in 6.3.3-p1+tuxcare...
CLSA-2026-1778805973 TuxCare security update for picomatch (2 CVEs)
TuxCare rebuilt picomatch to address 2 CVEs. Fixed in 2.3.1-tuxcare.1...
CLSA-2026-1775003174 TuxCare security update for underscore.string (1 CVE)
TuxCare rebuilt underscore.string to address 1 CVE. Fixed in 2.3.3-tuxcare.1...
CLSA-2026-1773360975 TuxCare security update for ms (2 CVEs)
TuxCare rebuilt ms to address 2 CVEs. Fixed in 0.3.0-tuxcare.1...
CLSA-2026-1773274564 TuxCare security update for tunnel-agent (1 CVE)
TuxCare rebuilt tunnel-agent to address 1 CVE. Fixed in 0.4.3-tuxcare.1...
CLSA-2026-1772928825 TuxCare security update for debug (1 CVE)
TuxCare rebuilt debug to address 1 CVE. Fixed in 2.3.3-tuxcare.1...
CLSA-2026-1771546208 TuxCare security update for braces (1 CVE)
TuxCare rebuilt braces to address 1 CVE. Fixed in 2.3.2-tuxcare.1...
CLSA-2025-1760313987 TuxCare security update for org.springframework.webflow (2 CVEs)
TuxCare rebuilt 5 org.springframework.webflow packages to address 2 CVEs. Fixed in 2.3.1.RELEASE-tuxcare.1...
PT-2026-67131
The User Access Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.15 via the 'uamgetfile' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain...
Atlassian Confluence 9.0.1 / 9.1.x / 9.2.x < 9.2.17 / 9.3.1 / 9.4.x / 9.5.1 / 10.0.2 / 10.1.x / 10.2.x < 10.2.7 (CONFSERVER-104334)
The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104334 advisory. - This High severity DoS Denial of Service vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and...
CLEANSTART-2026-BB26789 Security fixes in spark-operator 2.3.0-r3
Package spark-operator version 2.3.0-r3 fixes 4 vulnerabilities: CVE-2026-32281, CVE-2026-32288, CVE-2026-32289, CVE-2026-32280...
CLEANSTART-2026-HW41013 Security fixes in postgresql15 15.3-r0
Package postgresql15 version 15.3-r0 fixes 2 vulnerabilities: CVE-2023-2454, CVE-2023-2455...
EUVD-2026-50965
A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM. The vulnerability occurs because user-controlled input is not properly validated before being decoded and copied into a fixed-size stack buffer. An authenticated attacker can exploit this issue to cause denial ...
CVE-2026-67245 A path traversal vulnerability was found in the VPN Clients on the ADM
A path traversal vulnerability was found in the VPN Clients on the ADM. The vulnerability occurs because user-controlled certificate name input is not sufficiently validated before being used to construct the upload destination path. An authenticated attacker can exploit this issue to write an...
CVE-2026-67244
A format string vulnerability in ADM’s Notification OAuth settings is triggered by user-controlled notification configuration input that is processed via an unsafe format-string operation. Exploitation requires authenticated administrator privileges and can disclose memory information or cause de...
CVE-2026-66434
Contributor Cross Site Scripting XSS in Photonic Gallery & Lightbox for Flickr, SmugMug & Others = 3.33 versions...
Fedora 44 : lego (2026-30e8e9a2b2)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-30e8e9a2b2 advisory. Update to 5.3.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...
SUSE-SU-2026:22938-1 Security update for runc
This update for runc fixes the following issues: Update to 1.3.6. - CVE-2026-41579: malicious image with a /dev symlink can trigger limited host filesystem integrity violations bsc1268275. Other updates and bugfixes: - Version 1.3.6: Various integration test improvements. When masking directories...
