HPESBHF05120 rev.1 - HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01442, Intel Xeon Processor Firmware Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Performance - Prior to BIOS v3.0008-20-2026 HPE StoreEasy 1470 Storage - Prior to BIOS v3.0008-20-2026 HPE StoreEasy 1570 Performance - Prior to BIOS...

Oracle Linux 8 : ELSA-2026-62583-0: / nodejs:24 (ELSA-2026-625830)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-625830 advisory. - deps: update npm/brace-expansion to 5.9.0 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223388 RHEL-223907 RHEL-223792 -...

openSUSE 16: gegl / gegl-0_4 / gegl-0_4-lang / gegl-devel / libgegl-0_4-0 / etc (openSUSE-SU-2026:21731-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21731-1 advisory. Changes in gegl: - CVE-2026-18300: libs/rgbe: fix 200kb report from ZDI bsc1276229 Tenable has extracted the preceding description block directly from t...

Fedora 44 : firefox / nss (2026-42a3a95e62)

The remote Fedora 44 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-42a3a95e62 advisory. NSS Release Notes Update NSS to 3.127.0 - Bug 1869493 - Heap-buffer overflow in AES Keywrap. - Bug 2052210 - Generate additional test message for...

Oracle Linux 8 : ELSA-2026-62507-0: / gimp:2.8 (ELSA-2026-625070)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-625070 advisory. - fix CVE-2026-59090 - fix CVE-2026-18301 - fix CVE-2026-18303 - fix CVE-2026-18305 - fix CVE-2026-18306 - fix CVE-2026-66758 - fix CVE-2026-18304 -...

Oracle Linux 8 : ELSA-2026-62219-0: / nodejs:22 (ELSA-2026-622190)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-622190 advisory. - Update to version 22.23.2 Fixes: CVE-2026-56846 CVE-2026-56848 CVE-2026-58043 Resolves: RHEL-235693 RHEL-235688 RHEL-235662 nodejs-nodemon - Rebase...

Debian dsa-6482 : chromium - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6482 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6482-1 [email protected] https://www.debian.org/securit...

led-class Heap Buffer Overflow DoS

The vulnerability of the ledget function in the drivers/leds/led-class.c module related to Linux LED support in the Linux kernel is associated with errors during link update. Exploiting this vulnerability could allow an attacker to cause a service failure...

openSUSE 16: orthanc / orthanc-authorization / orthanc-devel / orthanc-dicomweb / etc (openSUSE-SU-2026:21728-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21728-1 advisory. Changes in orthanc: - Version 1.13.0 Highlights: complete rewrite of how DICOM files are retrieved from the storage area, parsed, and transcoded. The...

openSUSE 16: java-25-openjdk / java-25-openjdk-demo / java-25-openjdk-devel / etc (openSUSE-SU-2026:21714-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21714-1 advisory. - CVE-2026-60589: OpenJDK: Improve Resource Resolving bsc1275777. - CVE-2026-61308: OpenJDK: Enhance HTTP Connections bsc1275778. -...

HPESBHF05110 rev.1 - HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01427, Intel Chipset Firmware Advisory, Multiple Vulnerabilities

Potential Security Impact: Remote: Denial of Service DoS, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Performance - Prior to BIOS v3.0008-20-2026 HPE StoreEasy 1470 Storage - Prior to BIOS v3.0008-20-2026 HPE StoreEasy 1570...

PT-2026-85203

A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function Order::pupdate of the file /rider/orders/controller.php?action=edit&actions=confirm of the component Order Status Update. The manipulation of the argument ID lead...

glibc-2.44-1.1 on GA media (moderate)

glibc-2.44-1.1 on GA media Announcement ID: openSUSE-SU-2026:11660-1 Rating: moderate Cross-References: CVE-2026-6368 CVE-2026-6791 CVSS scores: CVE-2026-6368 SUSE : 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H CVE-2026-6791 SUSE : 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H Affected...

perl-GD security update

2.49-3.0.1 - Security update for CVE-2026-11526 Orabug: 39825996...

CVE-2026-85187: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Online Medicine Delivery System 1.0. Affected by this issue is the function Order::pupdate of the file /rider/orders/controller.php?action=edit&actions=confirm of the component Order Status Update. The manipulation of the argument ID lead...

Fedora 43 : gvfs (2026-571b7e1505)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-571b7e1505 advisory. Fix CVE-2026-84267, CVE-2026-84268, CVE-2026-84269, and CVE-2026-84270 Tenable has extracted the preceding description block directly from the Fedor...

nodejs:24 security update

nodejs 1:24.18.0-3 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 5.9.0 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223388 RHEL-223907 RHEL-223792 1:24.18.0-3 - Backport patch update sqlite to 3.53.4 Fixes: CVE-2026-11824, CVE-2026-11822...

MiracleLinux 9 : freerdp-2.11.7-7.el9_8.6 (AXSA:2026-1752:27)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1752:27 advisory. FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders CVE-2026-67301 FreeRDP: FreeRDP: Denial of Service via crafte...

java-21-openjdk security update

1:21.0.12.1.1-1.2.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.12.1.1-1.2 - Bump release for PQC build - Related: RHEL-235625 1:21.0.12.1.1-1.1 - Update to jdk-21.0.12.1+1 GA - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - This...

Oracle Linux 8 : ELSA-2026-62218-0: / libssh (ELSA-2026-622180)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-622180 advisory. 0.9.6-17 - Backport CVE patches from 0.11.5 Resolves: RHEL-215677 Resolves: RHEL-215674 Resolves: RHEL-215680 Resolves: RHEL-215678 Resolves:...