openjdk: Improve HttpServer Request handling (Oracle CPU 2026-01)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17...

openjdk: Improve JMX connections (Oracle CPU 2026-01)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: RMI. Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and...

PT-2026-4819

Name of the Vulnerable Software and Affected Versions iJason-Liu Books Manager affected versions not specified Description A cross site scripting issue exists in the file controllers/books center/add book check.php. Manipulation of the mark argument can lead to exploitation. The attack can be...

Unity Linux 20.1070e Security Update: zvbi (UTSA-2026-004961)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004961 advisory. A vulnerability classified as critical has been found in libzvbi up to 0.2.43. This affects the function vbicapturesimloadcaption of the file src/io-sim.c. The...

Debian: Security Advisory (DSA-6109-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2026:0253-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-4453-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-202601-03 : GIMP: Arbitrary Code Execution

The remote host is affected by the vulnerability described in GLSA-202601-03 GIMP: Arbitrary Code Execution A vulnerability has been discovered in GIMP. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly from the Gentoo...

SUSE: Security Advisory (SUSE-SU-2026:0257-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2026-0769

The Langflow framework is vulnerable to an Eval Injection Remote Code Execution vulnerability in the eval_custom_component_code function. The flaw stems from a lack of proper validation of user-supplied strings before they are used to execute Python code. Attackers can leverage this to execute ar...

CVE-2026-0757

MCP Manager for Claude Desktop execute-command Command Injection Sandbox Escape Vulnerability. This vulnerability allows remote attackers to bypass the sandbox on affected installations of MCP Manager for Claude Desktop. User interaction is required to exploit this vulnerability in that the targe...

Oracle Identity Manager (January 2026 CPU)

The 12.2.1.4.0 and 14.1.2.1.0 versions of Identity Manager installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2026 CPU advisory. - Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware component: Installer Spring Framework...

CVE-2026-1328

CVE-2026-1328 affects Totolink NR1800X (firmware 9.1.0u.6279_B20210910). The vulnerable component is the POST Request Handler function setWizardCfg in file /cgi-bin/cstecgi.cgi . A crafted manipulation of the argument ssid results in a buffer overflow , enabling remote execution. Public exploit e...

openjdk: Improve JMX connections (Oracle CPU 2026-01)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: RMI. Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and...

Oracle Primavera Unifier (January 2026 CPU)

The versions of Primavera Unifier installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2026 CPU advisory. - Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Integration Apache Tika. Supported versions th...

Oracle GoldenGate Information Exposure Vulnerability (January 2026 CPU)

The detected versions of GoldenGate installed on the remote host are affected by a information exposure vulnerability as referenced in the January 2026 CPU advisory. - Dell BSAFE Crypto-J generates an error message that includes sensitive information about its environment and associated data. A...

Azure Linux 3.0 Security Update: wireshark (CVE-2024-24476)

The version of wireshark installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-24476 advisory. - A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the...

The vulnerability of the JavaScript and TypeScript Deno execution environment’s crypto module allows attackers to exploit it to disclose sensitive information through brute-force attacks.

The vulnerability of the JavaScript and TypeScript Deno execution environment’s crypto module is related to the absence of the necessary encryption step. Exploiting this vulnerability allows a remote attacker to disclose sensitive information by performing a brute-force attack...

Debian dsa-6105 : modsecurity-crs - security update

The remote Debian 12 / 13 host has a package installed that is affected by a vulnerability as referenced in the dsa-6105 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6105-1 [email protected] https://www.debian.org/security/...

CVE-2026-1179

A vulnerability was detected in Yonyou KSOA 9.0. This affects an unknown part of the file /kmf/userpopedom.jsp of the component HTTP GET Parameter Handler. The manipulation of the argument folderid results in sql injection. The attack can be launched remotely. The exploit is now public and may be...