21998 matches found
Amazon Linux 2 : kbd, --advisory ALAS2-2026-3885 (ALAS-2026-3885)
The version of kbd installed on the remote host is prior to 1.15.5-15. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3885 advisory. openvt -u is intended to identify the owner of the current VT and then execute login as that user from a privileged context. In the...
Important: libvirt
Issue Overview: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection CVE-2026-61477 libvirt: Check for empty string condition and skip inclusion of the XML document context in the error message. CVE-2026-61478 A flaw was found in libvirt. A local...
Linux Distros Unpatched Vulnerability : CVE-2026-82248
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gix-worktree-state before 0.33.0 part of gitoxide allows writing files outside the worktree on Windows. gixworktreestate::checkout follows an existing terminal...
Linux Distros Unpatched Vulnerability : CVE-2026-80663
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tools/power/x86/intel-speed-select: Harden daemon pidfile open Avoid symlink-based pidfile clobbering by opening the pidfile with ONOFOLLOW and validating it wi...
Amazon Linux 2 : libvirt, --advisory ALAS2-2026-3873 (ALAS-2026-3873)
The version of libvirt installed on the remote host is prior to 4.5.0-36. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3873 advisory. libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection CVE-2026-61477...
MiracleLinux 9 : attr-2.6.0-1.el9_8 (AXSA:2026-1707:01)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1707:01 advisory. attr: Symlink Traversal Privilege Escalation via getfattr and setfattr CVE-2026-54371 Tenable has extracted the preceding description block directly from the...
OESA-2026-3526 docker security update
Docker is a product for you to build, ship and run any application as a lightweight container. Security Fixes: The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine filesystem operations to the destination directory...
Linux Distros Unpatched Vulnerability : CVE-2026-82455
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination...
AZL-98403 CVE-2026-82455 affecting package ruby 3.3.5-9
RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination directory points outside the extraction root, extracted files that appear to be written under the destination directory can instead be writt...
CVE-2026-82455
Rejected reason: The RubyGems maintainers determined that the reported symlink-following behavior during gem extraction is not a security vulnerability, so no vulnerability exists for this record to describe...
CVE-2026-82455
Rejected reason: The RubyGems maintainers determined that the reported symlink-following behavior during gem extraction is not a security vulnerability, so no vulnerability exists for this record to describe...
UBUNTU-CVE-2026-82455
RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination directory points outside the extraction root, extracted files that appear to be written under the destination directory can instead be writt...
CVE-2026-82455 RubyGems before 4.0.13 Path Traversal via Symlink Resolution
RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination directory points outside the extraction root, extracted files that appear to be written under the destination directory can instead be writt...
CVE-2026-82455
RubyGems before 4.0.13 fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination directory points outside the extraction root, extracted files can be written outside the intended directory, breaking the extr...
EUVD-2026-68102
RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination directory points outside the extraction root, extracted files that appear to be written under the destination directory can instead be writt...
CVE-2026-82455
...
Unity Linux 20.1070e Security Update: runc (UTSA-2026-104944)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104944 advisory. runc is a CLI tool for spawning and running containers according to the OCI specification. In versions prior to 1.3.6, 1.4.0-rc.1, 1.4.0-rc.12, 1.5.0-rc.1, and...
Linux Distros Unpatched Vulnerability : CVE-2026-59944
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and from 2.3.0 until 2.10.3, a malicious or compromised dependency can bypass the...
PT-2026-83434
Name of the Vulnerable Software and Affected Versions RubyGems versions prior to 4.0.13 Description RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. If a pre-existing symlink within the destination directory points outside the extraction...