CLEANSTART-2026-NB78893 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-64715, CVE-2025-68119, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, CVE-2026-33726 applied in versions: 0.13.3-r0, 0.13.3-r1

Multiple security vulnerabilities affect the hubble-ui-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LR09759 Security fixes for ghsa-72hv-8253-57qq applied in versions: 3.6.4-r4

Security vulnerability affects the apache-zookeeper package. This issue is resolved in later releases. See references for vulnerability details...

GHSA-QFGR-CRR9-7R49 vulnerabilities

Vulnerabilities for packages: logstash, kube-fluentd-operator, ruby3.2-rails, pact-broker-docker-fips, pact-broker-docker, ruby3.4-rails...

GHSA-H2JQ-G4CQ-5PPQ vulnerabilities

Vulnerabilities for packages: logstash, ruby3.4-rack, ruby4.0-rack, kube-fluentd-operator, ruby3.2-rails, ruby3.2-rack, gitlab-rails-ce-fips, gitlab-cng, pact-broker-docker-fips, pact-broker-docker, gitlab-rails-ce, ruby3.3-rack, ruby3.4-rails...

GHSA-Q2WW-5357-X388 vulnerabilities

Vulnerabilities for packages: logstash, ruby3.4-rack, ruby4.0-rack, kube-fluentd-operator, ruby3.2-rails, ruby3.2-rack, gitlab-rails-ce-fips, gitlab-cng, pact-broker-docker-fips, pact-broker-docker, gitlab-rails-ce, ruby3.3-rack, ruby3.4-rails...

GHSA-VGPV-F759-9WX3 vulnerabilities

Vulnerabilities for packages: logstash, ruby3.4-rack, ruby4.0-rack, kube-fluentd-operator, ruby3.2-rails, ruby3.2-rack, gitlab-rails-ce-fips, gitlab-cng, pact-broker-docker-fips, pact-broker-docker, gitlab-rails-ce, ruby3.3-rack, ruby3.4-rails...

CVE-2026-32762 vulnerabilities

Vulnerabilities for packages: logstash, kube-fluentd-operator, ruby3.2-rails, pact-broker-docker-fips, pact-broker-docker, ruby3.4-rails...

GHSA-V6X5-CG8R-VV6X vulnerabilities

Vulnerabilities for packages: logstash, kube-fluentd-operator, ruby3.2-rails, pact-broker-docker-fips, pact-broker-docker, ruby3.4-rails...

WeGIA 输入验证错误漏洞

WeGIA is a network manager for a welfare organization developed by Nilson Lazarin. Versions of WeGIA prior to 3.6.9 contained a vulnerability related to input validation errors. This vulnerability stemmed from the lack of validation or restrictions on the nextPage parameter, which could lead to...

PT-2026-30734

WeGIA is a Web manager for charitable institutions. Prior to 3.6.9, an Open Redirect vulnerability was identified in the /WeGIA/controle/control.php endpoint of the WeGIA application, specifically through the nextPage parameter when combined with metodo=listarId and nomeClasse=IsaidaControle. The...

C++ Web Framework 路径遍历漏洞

C++ Web Framework is a Qt-based C++ MVC web application development framework developed by Herik Lima. Versions of C++ Web Framework 3.1 and earlier contained a path traversal vulnerability, which was caused by some unknown handling methods...

Fedora 43 : calibre (2026-9cc418c23e)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9cc418c23e advisory. Update to 9.6.0. Fixes rhbz2452087 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

Fedora 43 : gnome-remote-desktop (2026-409856189a)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-409856189a advisory. Fixes CVE-2025-5024 by adding connection throttling Tenable has extracted the preceding description block directly from the Fedora security advisory. Note th...

Fedora: Security Advisory (FEDORA-2026-e8c06584a9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2026-49aedae50d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2026-37625

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.216 OpenSSL 3.x Description An inappropriate implementation in Tint within Google Chrome allows a remote attacker to potentially perform a sandbox escape using a crafted HTML page. In OpenSSL, a...

WeGIA 输入验证错误漏洞

WeGIA is a network manager for the welfare organization developed by Nilson Lazarin. Versions of WeGIA prior to 3.6.9 contained a vulnerability related to input validation errors. This vulnerability stemmed from the lack of validation on the /WeGIA/controle/control.php endpoint, which did not...

OFFIS DCMTK 操作系统命令注入漏洞

OFFIS DCMTK is a collection of libraries and applications developed by the German company OFFIS that implement most DICOM standards. It includes software for checking, processing, and converting DICOM image files, handling offline media, sending and receiving images via network connections, as we...

PT-2026-30570

A vulnerability has been found in assafelovic gpt-researcher up to 3.4.3. This affects the function extract command data of the file backend/server/server utils.py of the component ws Endpoint. Such manipulation of the argument args leads to code injection. The attack may be performed from remote...

EUVD-2019-20091

C4G Basic Laboratory Information System 3.4 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL commands by injecting malicious code through the site parameter. Attackers can send GET requests to the usersselect.php endpoint with crafted S...