CVE-2026-28981

creationtimestamp| type| source ---|---|--- 2026-07-28 04:46:32+00:00| seen| https://www.hkcert.org/security-bulletin/apple-products-multiple-vulnerabilities20260728 2026-07-28 08:46:18+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1984 2026-07-28 17:15:12+00:00| seen|...

PT-2026-65495

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M20 through 11.0.24 Apache Tomcat versions 10.1.24 through 10.1.57 Apache Tomcat versions 9.0.89 through 9.0.120 Description An uncontrolled resource consumption issue exists in the WebSocket chat example. The...

Oracle Linux 10 : go-fdo-server (ELSA-2026-46395)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-46395 advisory. 1.0.1-3 - Rebuild against updated golang Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...

FreeBSD : Erlang/OTP -- heap corruption decoding invalidly encoded large tuples (445df078-89e1-11f1-b35c-4c526214c986)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 445df078-89e1-11f1-b35c-4c526214c986 advisory. The Erlang/OTP team reports: Fixed heap corruption when an invalidly encoded tuple with an arity of 2^3...

SUSE SLED15 / SLES15 Security Update : alsa (SUSE-SU-2026:3270-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3270-1 advisory. This update for alsa fixes the following issue - CVE-2026-56109: double-free vulnerability in parsedef in src/conf.c th...

SUSE SLES16: jline3 / jline3-builtins / jline3-console / jline3-console-ui / etc (SUSE-SU-2026:22856-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22856-1 advisory. - CVE-2026-56740: unauthenticated remote memory exhaustion via unbounded Telnet NEW-ENVIRON variables bsc1269021. - CVE-2026-56741...

Debian dsa-6402 : hpijs-ppds - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6402 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6402-1 [email protected] https://www.debian.org/securit...

ALSA-2026:47085 Important: rest security update

The rest packages provide a library for access to the RESTful web services. Security Fixes: librest: weak random number generation in PKCE implementation CVE-2026-16615 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information,...

SUSE SLES16 Security Update : perl-HTTP-Date (SUSE-SU-2026:22859-1)

The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:22859-1 advisory. This update for perl-HTTP-Date fixes the following issue - CVE-2026-14741: CPU exhaustion via polynomial regex backtracking in parsedate...

Oracle Linux 10 : go-fdo-client (ELSA-2026-46394)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-46394 advisory. 1.0.0-5 - Rebuild against updated golang Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

SUSE SLES12: java-11-openjdk / java-11-openjdk-demo / java-11-openjdk-devel / etc (SUSE-SU-2026:3284-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3284-1 advisory. This update for java-11-openjdk fixes the following issues Upgrade to upstream tag jdk-11.0.32+9 July 2026 CPU. Security issues fixed: -...

Apache Tomcat 11.0.0.M1 < 11.0.25 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 11.0.25. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat11.0.25security-11 advisory. - Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This iss...

RHEL 8 : libpq (RHSA-2026:47090)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47090 advisory. The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. Security Fixes: postgresql:...

FreeBSD : Erlang/OTP -- denial of service via exponential certificate policy tree growth (445d674f-89e1-11f1-b35c-4c526214c986)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 445d674f-89e1-11f1-b35c-4c526214c986 advisory. https://github.com/erlang/otp/security/advisories/GHSA-622p-qfh6-c352 reports: A remote attacker can...

Debian dsa-6401 : ctdb - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6401 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6401-1 [email protected] https://www.debian.org/securit...

FreeBSD : Erlang/OTP -- denial of service in epmd (445e3324-89e1-11f1-b35c-4c526214c986)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 445e3324-89e1-11f1-b35c-4c526214c986 advisory. The Erlang/OTP team reports: Mitigated a denial of service attack in epmd. Tenable has extracted the...

FreeBSD : Erlang/OTP -- (D)TLS-1.2 server certificate verification bypass (445c61c0-89e1-11f1-b35c-4c526214c986)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 445c61c0-89e1-11f1-b35c-4c526214c986 advisory. https://github.com/erlang/otp/security/advisories/GHSA-c6cw-pr89-w882 reports: The OTP TLS/DTLS client...

RHEL 10 : httpd (RHSA-2026:47046)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:47046 advisory. The httpd packages provide the Apache HTTP Server, a powerful, efficient, and extensible web server. Security Fixes: httpd: incomplete fix...

RHEL 8 : sssd (RHSA-2026:46990)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:46990 advisory. The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication...

Fedora 43 : perl-Mojolicious (2026-6f12b08313)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6f12b08313 advisory. Mojolicious 9.48 fixes a security issue where CSRF tokens were vulnerable to BREACH attacks. Tokens are now masked with a fresh random value on every request...