26806 matches found
Oracle Linux 10 : libtiff (ELSA-2026-12265)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-12265 advisory. 4.6.0-6.3 - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile RHEL-159309 Tenable has extracted the preceding description block directly...
HashiCorp Consul Configuration Tool Unauthorized Access
The vulnerability of the HashiCorp Consul Community Edition and Consul Enterprise service configuration tools is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access t...
EUVD-2026-26301
A security vulnerability has been detected in ZachHandley ZMCPTools up to 0.2.2. Affected by this issue is some unknown functionality of the file src/managers/ResourceManager.ts of the component MCP Log Resource Handler. The manipulation of the argument dirname leads to path traversal. Remote...
CVE-2026-7397
The CVE affects NousResearch hermes-agent v0.8.0, specifically the _check_sensitive_path logic in tools/file_tools.py, enabling symlink following when exploited locally. Details from connected records indicate the issue arises from path handling that can be manipulated by an attacker with local a...
net.jawr.extensions:jawr-spring-extension (3.6), net.jawr.tools:jawr-ant (1.6) +11 more potentially affected by CVE-2026-22745 via org.springframework:spring-webmvc (2.0.8)
org.springframework:spring-webmvc MAVEN version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - net.jawr.extensions:jawr-spring-extension 3.6 - net.jawr.tools:jawr-ant 1.6 -...
net.jawr.extensions:jawr-spring-extension (3.6), net.jawr.tools:jawr-ant (1.6) +11 more potentially affected by CVE-2026-22741 via org.springframework:spring-webmvc (2.0.8)
org.springframework:spring-webmvc MAVEN version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - net.jawr.extensions:jawr-spring-extension 3.6 - net.jawr.tools:jawr-ant 1.6 -...
Top AI-Powered Vendor Risk Management Platforms for SaaS Companies in 2026
Top AI-powered vendor risk platforms for SaaS companies in 2026, compare tools, features, and how to choose the…...
PT-2026-35969
A security flaw has been discovered in NousResearch hermes-agent 0.8.0. This affects the function check sensitive path of the file tools/file tools.py. The manipulation results in symlink following. Attacking locally is a requirement. The exploit has been released to the public and may be used fo...
CVE-2018-25310: Cross-Site Request Forgery (CSRF)
VideoFlow Digital Video Protection DVP 2.10 contains an authenticated remote code execution vulnerability that allows authenticated attackers to execute arbitrary system commands by exploiting a cross-site request forgery flaw in the web management interface. Attackers with valid credentials can...
Fedora 44 : vhs (2026-d6f01a944d)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d6f01a944d advisory. Update to version 0.11.0 and adopt go-vendor-tools. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note th...
com.redis.om:redis-om-spring-ai (>=1.0.0-rc2, <=2.0.10), io.github.massimilianopili:mcp-embeddings-tools (>=0.0.1, <=0.1.0) +2 more potentially affected by CVE-2026-40979 via org.springframework.ai:spring-ai-transformers (>=1.0.0, <=1.0.5)
org.springframework.ai:spring-ai-transformers MAVEN version =1.0.0, =1.0.0-rc2, =0.0.1, =1.0.0, =1.0.5 Source cves: CVE-2026-40979 Source advisory: OSV:GHSA-R5HP-3CGJ-J6XV...
com.thecookiezen:archiledger-core (>=0.0.4, <=0.0.5), io.github.massimilianopili:mcp-vector-tools (0.3.1) +1 more potentially affected by CVE-2026-40979 via org.springframework.ai:spring-ai-transformers (>=1.1.0, <=1.1.4)
org.springframework.ai:spring-ai-transformers MAVEN version =1.1.0, =0.0.4, =1.1.0, =1.1.4 Source cves: CVE-2026-40979 Source advisory: GHSA-R5HP-3CGJ-J6XV...
com.thecookiezen:archiledger-core (>=0.0.4, <=0.0.5), io.github.massimilianopili:mcp-vector-tools (0.3.1) +1 more potentially affected by CVE-2026-40979 via org.springframework.ai:spring-ai-transformers (>=1.1.0, <=1.1.4)
org.springframework.ai:spring-ai-transformers MAVEN version =1.1.0, =0.0.4, =1.1.0, =1.1.4 Source cves: CVE-2026-40979 Source advisory: MEND:CVE-2026-40979...
OpenClaw security vulnerabilities
OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.4.8 contained security vulnerabilities. These vulnerabilities stemmed from the absence of blacklist entries for environment variables such as HGRCPATH, CARGOBUILDRUSTCWRAPPER,...
Towards Agentic Investigation of Security Alerts
Security analysts are overwhelmed by the volume of alerts and the low context provided by many detection systems. Early-stage investigations typically require manual correlation across multiple log sources, a task that is usually time-consuming. In this paper, we present an experimental, agentic...
python-dev-tools (>=2019.8.14, <=2019.8.24) potentially affected by CVE-2026-6357 via pip (19.2.2)
pip PYPI version 19.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.8.14, =2019.8.24 Source cves: CVE-2026-6357 Source advisory: OSV:GHSA-JP4C-XJXW-MGF9...
python-dev-tools (>=2019.7.25, <=2019.8.8) potentially affected by CVE-2026-6357 via pip (19.2.1)
pip PYPI version 19.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.7.25, =2019.8.8 Source cves: CVE-2026-6357 Source advisory: OSV:GHSA-JP4C-XJXW-MGF9...
notebooktoall (>=0.1.7, <=0.2.0), python-dev-tools (>=2019.2.25, <=2019.3.1) potentially affected by CVE-2026-6357 via pip (19.0.2)
pip PYPI version 19.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - notebooktoall =0.1.7, =2019.2.25, =2019.3.1 Source cves: CVE-2026-6357 Source advisory: OSV:GHSA-JP4C-XJXW-MGF9...
python-dev-tools (>=2019.4.24, <=2019.5.3) potentially affected by CVE-2026-6357 via pip (19.1.0)
pip PYPI version 19.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.4.24, =2019.5.3 Source cves: CVE-2026-6357 Source advisory: OSV:GHSA-JP4C-XJXW-MGF9...
