266974 matches found
Oracle Linux 8 : nginx:1.24 (ELSA-2026-38847)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-38847 advisory. - Resolves: RHEL-188406 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers CVE-2026-4205...
EulerOS 2.0 SP10 : openssh (EulerOS-SA-2026-2664)
According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.CVE-2026-35388 In OpenSSH before 10.3, comman...
Ubuntu 24.04 LTS / 26.04 LTS : libssh2 vulnerabilities (USN-8532-1)
The remote Ubuntu 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8532-1 advisory. It was discovered that libssh2 incorrectly handled certain publickey subsystem attributes. A remote attacker controlling a malicious SSH serv...
Mozilla Firefox < 152.0.6
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 152.0.6. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-67 advisory. - We are aware that exploit code for this is public however we are not aware of any attacks in the wild...
Debian dla-4682 : redis - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4682 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4682-1 [email protected]...
APSB26-83 : Security update available for Adobe Animate
Adobe has released an update for Adobe Animate. This update resolves critical vulnerabilities. Successful exploitation could lead to arbitrary code execution...
APSB26-80 : Security update available for Content Credentials SDK
Adobe has released security updates for Content Credentials SDK. This update addresses critical and important vulnerabilities that could result in arbitrary code execution, application denial-of-service, arbitrary file system read, security feature bypass, and privilege escalation...
APSB26-77 : Security update available for Adobe Creative Cloud Desktop Application
Adobe has released an update for the Creative Cloud Desktop for Windows. This update includes a fix for critical vulnerabilities that could lead to arbitrary code execution in the context of the current user...
ALSA-2026:39547 Important: perl-XML-LibXML security update
This module implements a Perl interface to the GNOME libxml2 library which provides interfaces for parsing and manipulating XML files. This module allows Perl programmers to make use of the highly capable validating XML parser and the high performance DOM implementation. Security Fixes:...
[SECURITY] [DLA 4680-1] imagemagick security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4680-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès July 13, 2026 https://wiki.debian.org/LTS -...
Security Bulletin: Multiple Vulnerabilities in React Router bundled with IBM Fusion, IBM Fusion HCI and IBM Fusion Data Cataloging
Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging include the react-router library, which is affected by multiple vulnerabilities, including cross-site scripting XSS, cross-site request forgery CSRF, and open redirect vulnerabilities. CVE-2026-21884, CVE-2026-22029, CVE-2026-2203...
CVE-2026-2002
creationtimestamp| type| source ---|---|--- 2026-07-13 22:00:21+00:00| seen| https://t.me/GithubRedTeam/90102 2026-07-14 00:00:37+00:00| seen| https://t.me/GithubRedTeam/90102 2026-07-15 00:00:18+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/90102...
Security Bulletin: Due to use of NodeJS, IBM Cloud Pak System is affected by multiple vulnerabilities
Summary Due to use of NodeJS libraries, IBM Cloud Pak System Software is affected by multiple vulnerabilities. These have been addressed in IBM Cloud Pak System Software version 2.3.5.1. Vulnerability Details CVEID:CVE-2026-22036 DESCRIPTION: Undici is an HTTP/1.1 client for Node.js. Prior to...
Updated gzip package fixes security vulnerabilities
The updated package fixes security vulnerabilities: Predictable Temporary File in GNU gzip. CVE-2026-41991 Global Buffer Overflow in GNU gzip. CVE-2026-41992...
MGASA-2026-0243 Updated thunderbird thunderbird-l10n packages fix security vulnerabilities
The updated packages fix security vulnerabilities: Privilege escalation in the Graphics: WebRender component. CVE-2026-12289 Memory safety bug fixed in Thunderbird ESR 140.12. CVE-2026-12290 Use-after-free in the Networking: HTTP component. CVE-2026-12291 Incorrect boundary conditions in the Web...
GHSA-JHRP-V2XG-MR29 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-MMX7-9GVJ-J7GM vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-R7M5-CCWW-9J78 vulnerabilities
Vulnerabilities for packages: chromium...