12675 matches found
Oracle Linux 10 : glib2 (ELSA-2026-19148)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19148 advisory. 2.80.4-13 - Fix CVE-2025-14087 and CVE-2025-14512 Tenable has extracted the preceding description block directly from the Oracle Linux security...
[SECURITY] Fedora 44 Update: python-bcrypt-4.3.0-14.fc44
Modern password hashing for your software and your servers...
Oracle Linux 9 : cifs-utils (ELSA-2026-39576)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-39576 advisory. 7.6-2 - resolves: RHEL-192982 - fix krb5 mount regression 7.6-1 - Update to version 7.6 - resolves: RHEL-185761 - CVE-2026-12505 cifs-utils: LPE via cifs.spneg...
(Pwn2Own) Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution Vulnerability
This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Autel MaxiCharger AC Elite Home EV chargers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of software updates. The issue...
Oracle Linux 10 : grafana (ELSA-2026-19027)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-19027 advisory. 10.2.6-25 - Resolves RHEL-158484: CVE-2026-25679 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...
SUSE SLED15 / SLES15 Security Update : python-urllib3 (SUSE-SU-2026:2854-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:2854-1 advisory. This update for python-urllib3 fixes the following issue - egression introduced by CVE-2025-66471 fix during file...
python-multipart affected by Denial of Service via large multipart preamble or epilogue data
SummaryA denial of service vulnerability exists when parsing crafted multipart/form-data requests with large preamble or epilogue sections. DetailsTwo inefficient multipart parsing paths could be abused with attacker-controlled input.Before the first multipart boundary, the parser handled leading...
RHSA-2026:37250 Red Hat Security Advisory: libreoffice security update
Bulletin has no description...
TencentOS Server 4: grafana (TSSA-2026:0525)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0525 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
RHSA-2026:36315 Red Hat Security Advisory: python3.14-pip security update
Bulletin has no description...
[SECURITY] Fedora 44 Update: rust-busd-0.5.0-3.fc44
A D-Bus bus broker implementation...
[SECURITY] Fedora 43 Update: python-jupyter-server-2.20.0-1.fc43
The Jupyter Server provides the backend i.e. the core services, APIs, and REST endpoints for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila...
c3p0-0.14.1-1.1 on GA media (moderate)
c3p0-0.14.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11166-1 Rating: moderate Cross-References: CVE-2026-55223 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the c3p0-0.14.1-1.1...
RHSA-2026:33552 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Bulletin has no description...
PT-2026-54783
Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based versions prior to 149.0.4022.98 Description A use-after-free issue exists in Microsoft Edge Chromium-based. This flaw allows an authorized attacker to execute arbitrary code over a network. Use-after-free is a...
HPESBNW05078 rev.1 - HPE Telco Service Orchestrator Software, Privilege Escalation to Filesystem Read-Access via Automatic ConfigProvider
Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Service Orchestrator Prior to v5.3.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2024-31141 |...
vulnerabilities found in Apple MacOS
Apple has addressed several vulnerabilities in macOS Tahoe. These vulnerabilities included out-of-bounds access, use-after-free errors, memory handling issues, type confusion, double-free operations, stack overflows, insufficient input validation, and race conditions. These vulnerabilities could...
CVE-2026-43706
A double free issue was addressed with improved memory management. This issue is fixed in iOS 26.5.2 and iPadOS 26.5.2, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.5.2, tvOS 26.6, visionOS 26.6, watchOS 26.6. Processing maliciously crafted web content may lead to an unexpected proce...
Security Bulletin: IBM SOAR QRadar Plugin App is vulnerable to using components with known vulnerabilities
Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM SOAR QRadar Plugin App has addressed the applicable CVEs with an update. Vulnerability Details CVEID:CVE-2026-34073 DESCRIPTION: cryptography is a package...