Lucene search
+L

19694 matches found

Tenable Nessus
Tenable Nessus
added 2026/07/08 12:0 a.m.5 views

RockyLinux 9 : skopeo (RLSA-2026:36317)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:36317 advisory. net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 crypto/x509: golang: golang crypto/x509: Denial of Service via excessive...

7.5CVSS7.3AI score0.00939EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2026/07/07 8:46 p.m.8 views

CVE-2026-53511

calibre is an e-book manager. Prior to 9.10.0, a malicious EPUB, OPF, or PDF file can execute arbitrary Python code when its metadata is read by calibre, including through Add books or Edit books, by embedding a custom column definition with a python: template in calibre:usermetadata that is pass...

8.5CVSS6.2AI score0.00197EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2026/07/07 12:5 p.m.8 views

RLSA-2026:34357 Important: opentelemetry-collector security update

Collector with the supported components for a Rocky Enterprise Software Foundation build of OpenTelemetry Security Fixes: github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint CVE-2026-42154 github.com/prometheus/prometheus:...

8.2CVSS7.3AI score0.00939EPSS
SaveExploits0References7
OSV
OSV
added 2026/07/07 12:5 p.m.8 views

RLSA-2026:35827 Important: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-39821 For more details about the security issue...

8.2CVSS6.6AI score0.00478EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/07 12:3 p.m.8 views

RLSA-2026:35829 Important: grafana-pcp security update

The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fixes: golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via...

8.2CVSS6.6AI score0.00478EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/07 12:3 p.m.5 views

RLSA-2026:35828 Important: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-39821 For more details about the security issue...

8.2CVSS5.9AI score0.00478EPSS
SaveExploits0References2
Rockylinux
Rockylinux
added 2026/07/07 12:3 p.m.7 views

grafana security update

An update is available for grafana. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Grafana is an open source, feature rich metrics dashboard and graph editor fo...

9.6CVSS6.7AI score0.00478EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/07/07 11:2 a.m.9 views

CVE-2026-54060

A flaw was found in Pillow, a Python imaging library. When processing a specially crafted font file, the library's font compilation function does not adequately check for excessive memory allocation. This oversight allows a remote attacker to trigger an unreasonable consumption of system memory,...

7.5CVSS6.1AI score0.00361EPSS
SaveExploits1References6
OSV
OSV
added 2026/07/07 6:0 a.m.6 views

RLSA-2026:35830 Important: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-39821 For more details about the security issue...

8.2CVSS5.9AI score0.00478EPSS
SaveExploits0References2
Rockylinux
Rockylinux
added 2026/07/07 6:0 a.m.6 views

grafana-pcp security update

An update is available for grafana-pcp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Grafana plugin for Performance Co-Pilot includes datasources for...

9.6CVSS6AI score0.00478EPSS
SaveExploits0
Redos
Redos
added 2026/07/07 12:0 a.m.4 views

ROS-20260707-73-0038

The vulnerability of the net/textproto component in the Go programming language is related to incorrect processing of output data for registration logs. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

5.3CVSS6.4AI score0.0037EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/07/07 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-54060

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. Prior to 12.3.0, PIL/FontFile.py FontFile.compile assembled per- glyph images into a combined bitmap with Image.new1, xsize,...

7.5CVSS5.3AI score0.00361EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/07/07 12:0 a.m.8 views

RockyLinux 10 : grafana-pcp (RLSA-2026:35826)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:35826 advisory. golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-39821 Tenable has extracted the...

9.6CVSS6.7AI score0.00478EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/07 12:0 a.m.7 views

RHEL 9 : skopeo (RHSA-2026:36317)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:36317 advisory. The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and...

7.5CVSS6.1AI score0.00939EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/07/07 12:0 a.m.12 views

RockyLinux 8 : grafana-pcp (RLSA-2026:35831)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:35831 advisory. golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-39821 Tenable has extracted the...

9.6CVSS6.7AI score0.00478EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/07 12:0 a.m.10 views

RockyLinux 10 : grafana (RLSA-2026:35827)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:35827 advisory. golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-39821 Tenable has extracted the...

9.6CVSS6.4AI score0.00478EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/07 12:0 a.m.6 views

ALSA-2026:36317 Important: skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 crypto/x509: golang: golang crypto/x509: Denial of...

7.5CVSS7AI score0.00939EPSS
SaveExploits0References6
AlmaLinux
AlmaLinux
added 2026/07/07 12:0 a.m.8 views

Important: skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 crypto/x509: golang: golang crypto/x509: Denial of...

7.5CVSS7.2AI score0.00939EPSS
SaveExploits0References6
Snyk
Snyk
added 2026/07/06 8:42 p.m.7 views

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the FontFile.compile process. An attacker can cause excessive memory allocation by providing a specially crafted font file that triggers uncontrolled resource consumption during image...

8.7CVSS6AI score0.00361EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/07/06 7:51 p.m.8 views

EUVD-2026-24978

comm: lossy UTF-8 conversion silently corrupts non-UTF-8 output...

3.3CVSS5.9AI score0.00176EPSS
SaveExploits1References6
Rows per page
Query Builder