OpenJDK 8 <= 8u492 / 11.0.0 <= 11.0.31 / 17.0.0 <= 17.0.19 / 21.0.0 <= 21.0.11 / 25.0.0 <= 25.0.3 / 26.0.0 <= 26.0.1 Multiple Vulnerabilities (2026-07-21)

The version of OpenJDK installed on the remote host is 8 prior to 8u492 / 11.0.0 prior to 11.0.31 / 17.0.0 prior to 17.0.19 / 21.0.0 prior to 21.0.11 / 25.0.0 prior to 25.0.3 / 26.0.0 prior to 26.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the 2026-07-21 advisory...

RockyLinux 8 : .NET 10.0 (RLSA-2026:41900)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:41900 advisory. dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM CVE-2026-50651 dotnet: .NET Core: Denial of Service via type...

RockyLinux 10 : kernel (RLSA-2026:42919)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:42919 advisory. kernel: crypto: afalg - zero initialize memory allocated via sockkmalloc CVE-2025-71113 kernel: Linux kernel: Denial of Service due to memory leak in...

RockyLinux 9 : .NET 8.0 (RLSA-2026:41894)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:41894 advisory. dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM CVE-2026-50651 dotnet: .NET Core: Denial of Service via type...

TencentOS Server 2: gstreamer-plugins-base and gstreamer-plugins-good (TSSA-2026:0755)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0755 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

Oracle Linux 10 : nginx (ELSA-2026-29874)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-29874 advisory. - Resolves: RHEL-188402 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers CVE-2026-420...

firefox-esr-140.13.0-1.1 on GA media (moderate)

firefox-esr-140.13.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11329-1 Rating: moderate Cross-References: CVE-2026-15718 CVE-2026-15719 CVE-2026-16349 CVE-2026-16350 CVE-2026-16351 CVE-2026-16352 CVE-2026-16353 CVE-2026-16354 CVE-2026-16355 CVE-2026-16356 CVE-2026-16357 CVE-2026-16358...

Security update for ImageMagick (moderate)

openSUSE security update: security update for imagemagick ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21391-1 Rating: moderate References: bsc1268640 bsc1270006 bsc1270081 bsc1271100 bsc1271293 bsc1271294 bsc1271311 bsc1271312 bsc1271313...

Security Bulletin: IBM Cognos Command Center has addressed vulnerabilities

Summary There are vulnerabilities in IBM Cognos Command Center. IBM Cognos Command Center 10.2.5 FP1 IF4 has addressed the applicable CVEs. Please refer to the table in the Related Information section for vulnerability impact. Vulnerability Details CVEID:CVE-2026-34197 DESCRIPTION: Improper Input...

[SECURITY] [DSA 6394-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6394-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 22, 2026 https://www.debian.org/security/faq -...

WordPress Bulk Page Generator – LPagery plugin <= 2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Bulk Landing Page Creator for WordPress LPagery versions = 2.5.7...

GHSA-MHM7-754M-9P8W vulnerabilities

Vulnerabilities for packages: druid, pinot, thingsboard, logstash, ruby3.2-jrjackson, nacos-docker, zookeeper, knative-kafka-broker-fips, infinispan, spark-fips, kafbat-ui-fips, elasticsearch, wavefront-proxy, elasticsearch-fips, airbyte-server, opensearch, commercial-elasticsearch, zookeeper-fip...

GHSA-C97M-VXHJ-P7J6 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-resourcegroups-fips, crossplane-provider-azure-operationalinsights, crossplane-provider-aws-iot-fips, crossplane-provider-aws-transfer, crossplane-provider-aws-amp, crossplane-provider-aws-kinesis-fips, crossplane-provider-aws-cloudwatch,...

CVE-2026-5160 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-resourcegroups-fips, crossplane-provider-azure-operationalinsights, crossplane-provider-aws-iot-fips, crossplane-provider-aws-transfer, crossplane-provider-aws-amp, crossplane-provider-aws-kinesis-fips, crossplane-provider-aws-cloudwatch,...

GHSA-G446-98W2-8P5W vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-F283-GHQC-FG79 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-94PJ-82F3-465W vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-WM3W-8RRP-J577 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-59889 vulnerabilities

Vulnerabilities for packages: opensearch, apicurio-registry, tez, apache-tika, ruby3.3-jrjackson, ruby3.2-jrjackson, zookeeper, gradle, apache-nifi-registry, wavefront-proxy, druid, keycloak-config-cli, infinispan, sonarqube, strimzi-kafka-operator, logstash, scala, confluent-kafka, spark, flyway...

GHSA-MHM7-754M-9P8W vulnerabilities

Vulnerabilities for packages: opensearch, tez, apache-tika, ruby3.3-jrjackson, ruby3.2-jrjackson, zookeeper, gradle, wavefront-proxy, druid, keycloak-config-cli, infinispan, sonarqube, logstash, confluent-kafka, spark, flyway, thingsboard, jenkins-plugin-manager, cassandra, akhq...