Kibana Reporting Unauthorized Access

The vulnerability of the Reporting component of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Elastic Defend Unauthorized Access

The vulnerability of the Elastic Defend component of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Kibana Connectors SSRF

The vulnerability of the Kibana Connector request execution mechanism of the Kibana visualization service is related to insufficient validation of requests at the server side. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...

Perl-DBI Code Execution

The vulnerability of the Perl-DBI interface for connecting to and working with databases involves the use of externally controlled input data for class selection. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

golang-x-net Uncontrolled Resource Consumption DoS

The vulnerability of the golang-x-net package in the Golang programming language is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

GitPython Data Protection Unauthorized Access

The vulnerability in the Python library for interacting with Git repositories, GitPython, is related to insufficient protection of sensitive data. Exploitation of this vulnerability may allow a remote attacker to gain unauthorized access to protected information...

Podman WORKDIR Security Restriction Bypass

The vulnerability of the WORKDIR processing mechanism in the software platform for managing and launching OCI containers, Podman, is related to the tracking of symbolic links. Exploiting this vulnerability allows a remote attacker to circumvent security restrictions...

ROS-20260925-73-0079

The vulnerability of the legacyloadclusterfromdisk function in the fs/erofs/zmap.c file of the EROFS file system’s kernel in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to...

CVE-2026-97866: Channel Accessible by Non-Endpoint

A weakness has been identified in Zhonglun CloudPOS 3.0. Affected by this vulnerability is an unknown functionality of the file Program.cs of the component Automatic Update. Executing a manipulation of the argument version/url/packagekey/package name can lead to channel accessible by non-endpoint...

PT-2026-98869

Name of the Vulnerable Software and Affected Versions Zhonglun CloudPOS version 3.0 Description A weakness exists in the Automatic Update component within the Program.cs file. A remote attacker can manipulate the version, url, packagekey, and package name arguments to make a channel accessible to...

ROS-20260925-73-0027

The vulnerability of the macsecpostdecrypt function in the drivers/net/macsec.c module of the network device driver for the Linux operating system is related to the bypassing of the authentication process. Exploiting this vulnerability allows a remote attacker to compromise the integrity of...

Oracle Linux 9 : perl-DBI (ELSA-2026-71422)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-71422 advisory. 1.643-9.6 - Force placeholder limit on : and :p too CVE-2026-73194 Related: RHEL-247327 Tenable has extracted the preceding description block directly from the...

Fedora 44 : mingw-gdk-pixbuf (2026-16f1152378)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-16f1152378 advisory. Backport fixes for CVE-2026-16768 and CVE-2026-81893. Tenable has extracted the preceding description block directly from the Fedora security...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : rsyslog vulnerability (USN-8786-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8786-1 advisory. It was discovered that rsyslog incorrectly calculated buffer sizes when replacing strings. A remote...

Perl-Crypt-DSA Data Compromise

The vulnerability of the Perl-Crypt-DSA digital signature package relates to the surface area of the attack, whose quantitative measure exceeds the desired maximum. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality of the protected information...

Linux Distros Unpatched Vulnerability : CVE-2026-91187

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Verification of Cryptographic Signature vulnerability in dashbit nimblezta allows an unauthenticated remote attacker to authenticate as an arbitrary...

ROS-20260925-73-0074

The vulnerability of the safexcelprobegeneric function in the Linux operating system is related to state management errors. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...

ROS-20260925-73-0136

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

ROS-20260925-73-0145

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

ROS-20260925-73-0140

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...