Jenkins HTTP Handler Bypass

The vulnerability of Jenkins’ HTTP handler for canceling queue elements is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass security restrictions from a remote location...

Erlang/OTP Uncontrolled Resource Consumption DoS

The vulnerability of the Erlang programming language is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

FreeRDP Buffer Overflow RCE

The vulnerability of the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

libssh Heap Overflow DoS

The vulnerability of the libssh library is related to uncontrolled memory allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

BuildKit indefinite resource distribution DoS

The vulnerability of the BuildKit container-building software lies in its ability to distribute resources indefinitely. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Kibana Machine Learning Data Compromise

The vulnerability of the Machine Learning plugin of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the integrity of the protected information...

Apache Tomcat Session Duration Unauthorized Access

The vulnerability of the Apache Tomcat application server is related to incorrect session duration settings. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

ROS-20260925-73-0097

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

Linux Distros Unpatched Vulnerability : CVE-2026-59990

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Jawn is an open source JSON parser. Prior to 1.7.0, Jawn parse methods accept arbitrarily deep JSON array and object nesting without a depth limit, allowing a...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenJDK 8 vulnerabilities (USN-8784-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8784-1 advisory. Kai Aizen discovered that the Networking component of OpenJDK 8 did not correctly handle user...

Fedora 46 : golang-x-image (2026-2d6aee1dc4)

The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-2d6aee1dc4 advisory. Automatic update for golang-x-image-0.46.0-2.fc46. Changelog Fri Sep 25 2026 lex Sez - 0.46.0-2 - Add requiresexclude Fri Sep 25 2026 Packit -...

ROS-20260925-73-0129

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : GStreamer Base Plugins vulnerability (USN-8797-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8797-1 advisory. It was discovered that GStreamer Base Plugins incorrectly handled certain OGG media files. A remote...

openSUSE 16 Security Update : cloudflared (openSUSE-SU-2026:21924-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21924-1 advisory. Changes in cloudflared: - Update version to 2026.9.1 Update vendor boo1278643, CVE-2026-56854, CVE-2026-78662, CVE-2026-56855 Propagate edge...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : Memcached vulnerability (USN-8792-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8792-1 advisory. It was discovered that Memcached incorrectly handled ASCII authentication. A remote attacker could possibly use this issue to cause...

Oracle Linux 9 : perl-DBI (ELSA-2026-71422)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-71422 advisory. 1.643-9.6 - Force placeholder limit on : and :p too CVE-2026-73194 Related: RHEL-247327 Tenable has extracted the preceding description block directly from the...

FFmpeg vf_hqdn3d Heap Buffer Overflow DoS

The vulnerability of the video processing filter vfhqdn3d in the FFmpeg multimedia library is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to corrupt memory, cause service failures, or execute arbitrary code...

ROS-20260925-73-0056

The vulnerability of the ipv6rplsrhrcv function in the RFC 6554 Source Routing Header Handler component of the Linux operating system is related to the execution of operations outside the buffer boundaries in memory. Exploitation of this vulnerability could allow a remote attacker to compromise t...

Fedora 44 : mingw-gdk-pixbuf (2026-16f1152378)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-16f1152378 advisory. Backport fixes for CVE-2026-16768 and CVE-2026-81893. Tenable has extracted the preceding description block directly from the Fedora security...

PT-2026-98873

Name of the Vulnerable Software and Affected Versions langchain4j versions prior to 1.5.3-beta11 langchain4j versions prior to 1.11.10-beta19 langchain4j versions prior to 1.18.1-beta28 Description A flaw in the LangChain4j-agentic component allows for remote deserialization. The issue resides in...