CVE-2026-35188

The OpenSSL library is vulnerable to a double-free vulnerability during the certificate verification path when processing a crafted OCSP stapled response. A malicious server can exploit this by delivering a crafted response through the status_request extension. Successful exploitation can result ...

EUVD-2024-22161

Malicious code in bioql PyPI...

Oracle Linux 9 : git-lfs (ELSA-2024-2724)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-2724 advisory. 3.4.1-2 - Rebuild with new Golang - Resolves: RHEL-32570, RHEL-28385, RHEL-28402, RHEL-28432 Tenable has extracted the preceding description block...

MGASA-2018-0153 Updated libvirt packages fix security vulnerabilities

Updated libvirt packages fix security vulnerabilities: In virsh, the hostname could crafted maliciously with ssh arguments, which would be passed to ssh bsc1053600. The defaulttlsx509verify and related parameters in qemu.conf control whether the TLS servers in QEMU request & verify certificates...