144022 matches found
DEBIAN-CVE-2026-63807
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level When recovering hugepages in the shadow MMU, verify that the base gfn of the shadow page is actually contained within the target memslot, before queryi...
DEBIAN-CVE-2026-53394
In the Linux kernel, the following vulnerability has been resolved: nfsd: avoid leaking pre-allocated openowner on unconfirmed retry race When findorallocopenstateowner encounters an unconfirmed owner, it calls releaseopenowner and sets oo = NULL. Control then falls through past the if oo guard -...
UBUNTU-CVE-2026-53390
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds read in smbcheckpermdacl The permission-check ACE walk in smbcheckpermdacl validates the ACE header size and caps sid.numsubauth at SIDMAXSUBAUTHORITIES, but it never checks that ace-size is actually larg...
UBUNTU-CVE-2026-63816
In the Linux kernel, the following vulnerability has been resolved: f2fs: atomic: fix UAF issue on f2fsinodeinfo.atomicinode - ioctlF2FSIOCGARBAGECOLLECTRANGE - shrink - f2fsgc - gcdatasegment - radatablockcowinode - mapping = F2FSIinode-atomicinode-imapping : f2fsiscowfilecowinode is true -...
UBUNTU-CVE-2026-63811
In the Linux kernel, the following vulnerability has been resolved: f2fs: read COW data with the original inode during atomic write When updating an atomic-write file, f2fswritebegin may read the previously written data back from the COW inode: prepareatomicwritebegin locates the block in the COW...
CVE-2026-63820
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix missing read bio submission on large folio error f2fsreaddatalargefolio can keep a read bio across multiple readahead folios. If a later folio hits an error before any of its blocks are added to the bio, folioinbio is...
UBUNTU-CVE-2026-53397
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix posixacl leak on SETACL decode failure nfsaclsvcdecodesetaclargs and nfs3svcdecodesetaclargs each call nfsstreamdecodeacl twice, first for NFSACL and then for NFSDFACL. Each successful call transfers ownership of a...
MGASA-2026-0267 Updated perl-CSS-Minifier-XS package fixes a security vulnerability
The updated package fixes a security vulnerability: CSS::Minifier::XS versions before 0.14 for Perl have a memory leak when the entire document is minified away. CVE-2026-13593...
CVE-2026-16208 django-tastypie throttle.py CacheDBThrottle race condition
A flaw has been found in django-tastypie up to 0.15.1. The affected element is the function CacheThrottle/CacheDBThrottle of the file tastypie/throttle.py. This manipulation causes race condition. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitability...
containerized-data-importer1.65-api-1.65.0-2.1 on GA media (moderate)
containerized-data-importer1.65-api-1.65.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:11305-1 Rating: moderate Cross-References: CVE-2025-22870 CVE-2025-22872 CVE-2025-58058 CVE-2025-58190 CVE-2026-27136 CVE-2026-33186 CVE-2026-34986 CVE-2026-35469 CVE-2026-39821 CVE-2026-39827...
Fedora 43 : antlr4-project (2026-d9ca28a7b8)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d9ca28a7b8 advisory. This update contains a fix for CVE-2026-13503. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
Fedora 43 : erlang (2026-965be97ac0)
"The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-965be97ac0 advisory. Backport fixes for CVE-2026-48858 ftp SSRF, CVE-2026-49759 SCTP DoS, CVE-2026-48860 dist-over-TLS auth bypass, CVE-2026-54886 ssh SFTP DoS,...
Fedora 43 : opam (2026-fb48505840)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-fb48505840 advisory. Version 2.5.2 of opam fixes CVE-2026-57825. See https://github.com/ocaml/opam/releases/tag/2.5.2 for more information. Tenable has extracted the preceding...
MiracleLinux 8 : python3.12-3.12.13-3.el8_10 (AXSA:2026-1289:16)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1289:16 advisory. python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations CVE-2026-15308 Tenable has extracted the preceding...
Fedora 44 : antlr4-project (2026-619f648cde)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-619f648cde advisory. This update contains a fix for CVE-2026-13503. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
MiracleLinux 9 : redis-6.2.22-1.el9_8 (AXSA:2026-1300:02)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1300:02 advisory. redis: RESTORE invalid memory access may allow remote code execution CVE-2026-25243 Tenable has extracted the preceding description block directly from the...
MiracleLinux 9 : unbound-1.24.2-3.el9_8.1 (AXSA:2026-1303:08)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1303:08 advisory. unbound: Heap overflow and crash with multiple nsid, cookie, padding EDNS options CVE-2026-42944 unbound: Unbound DNSSEC Validator Denial of Service...
Incorrect Authorization
Overview @fastify/http-proxy is a proxy http requests, for Fastify Affected versions of this package are vulnerable to Incorrect Authorization via the rewritePrefix param. An attacker can access restricted upstream paths by sending requests with URL-encoded characters in the prefix, bypassing...
[SECURITY] [DLA 4688-1] linux security update
Debian LTS Advisory DLA-4688-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings July 18, 2026 https://wiki.debian.org/LTS Package : linux Version : 6.1.177-1 CVE ID : CVE-2025-23131 CVE-2026-23272 CVE-2026-23278 CVE-2026-23302 CVE-2026-31451 CVE-2026-46252...