Gitlab -- vulnerabilities

Gitlab reports: Cross-site Scripting issue in Analytics Dashboards table field configuration impacts GitLab CE/EE Cross-site Scripting issue in Analytics Dashboards pagination controls impacts GitLab CE/EE GitLab Improper Authorization issue in CI/CD pipeline API impacts GitLab CE/EE Authorizatio...

Linux Distros Unpatched Vulnerability : CVE-2026-73433

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GStreamer gst-plugins-good avidemux. When parsing FUJIFILM metadata in an AVI strd chunk, gstavidemuxparsestrd decrements a remaining-length...

AlmaLinux 9 : postgresql (ALSA-2026:52395)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:52395 advisory. postgresql: PostgreSQL: Denial of Service via uncontrolled recursion in SSL/GSS negotiation CVE-2026-6479 Tenable has extracted the preceding description block...

Linux Distros Unpatched Vulnerability : CVE-2026-19548

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple Use-After-Free vulnerabilities were found in the addarchiveelement function in ld/ldmain.c of the GNU linker ld, a component of binutils. The root caus...

git-cliff-2.13.1-1.1 on GA media (moderate)

git-cliff-2.13.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11495-1 Rating: moderate Cross-References: CVE-2026-25541 CVSS scores: CVE-2026-25541 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-25541 SUSE : 8.7 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:...

The vulnerabilities of the functions queue_gso_packets() and queue_userspace_packet() in the openvswitch kernel module of Linux allow a hacker to cause a service failure.

The vulnerability of the queuegsopackets and queueuserspacepacket functions in the openvswitch kernel module of Linux operating systems is related to a single-byte offset error. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

PT-2026-71042

Name of the Vulnerable Software and Affected Versions 389-ds-base affected versions not specified Description A flaw exists where the get ldapmessage controls ext function frees the parsed controls array during the Session Tracking critical-control rejection path but fails to clear the SLAPI...

Linux Distros Unpatched Vulnerability : CVE-2026-73232

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ffuf is a fast web fuzzer written in Go. Prior to 2.2.0, ffuf allows a malicious target server to cause an out-of-memory denial of service because the response...

Debian dsa-6431 : openjdk-25-dbg - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6431 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6431-1 [email protected] https://www.debian.org/securit...

Linux Distros Unpatched Vulnerability : CVE-2026-73089

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to 4.28.7, index.js retains every distinct...

SUSE SLED15: freerdp / freerdp-devel / freerdp-proxy / freerdp-proxy-plugins / etc (SUSE-SU-2026:3562-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3562-1 advisory. - CVE-2026-27951: 32-bit system denial of service via endless blocking loop in StreamEnsureCapacity bsc1258939...

Linux Distros Unpatched Vulnerability : CVE-2026-72712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted...

Fedora 44 : clamav (2026-ecf6fe868f)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ecf6fe868f advisory. 1.4.6 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for these...

Linux Distros Unpatched Vulnerability : CVE-2026-62901

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network. CVE-2026-62901 Note that Nessus relies on the presenc...

Linux Distros Unpatched Vulnerability : CVE-2026-20338

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This...

The vulnerability of the Linux operating system’s kernel, related to errors in resource release, allows a hacker to cause a service failure.

The vulnerability of the Linux operating system’s kernel is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the fs/orangefs component in the Linux operating system, which allows a hacker to cause a service failure.

The vulnerability of the fs/orangefs component in the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver/regulator/core.c component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability in the drivers/regulator/core.c component of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

RHEL 10 : rhc-worker-playbook (RHSA-2026:54168)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:54168 advisory. A worker for yggdrasil that receives Ansible playbooks and executes them against the local host. Security Fixes: net: golang: Go net...

The vulnerability of the net/sched component in the Linux operating system’s kernel, which allows a hacker to trigger a service failure

The vulnerability of the net/sched component in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...