1388 matches found
ROOT-OS-DEBIAN-12-CVE-2026-64475 CVE-2026-64475 in linux - Patched by Root
Root has patched CVE-2026-64475 in the linux package for Root:Debian:12. Multiple fixed versions available...
TinaCMS - Path Traversal
TinaCMS CLI 2.1.8 contains a file system read vulnerability caused by disabled Vite server.fs.strict setting, letting unauthenticated attackers read arbitrary files on the host system, exploit requires access to the dev server. id: CVE-2026-29066 info: name: TinaCMS - Path Traversal author:...
RHSA-2026:49387 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Bulletin has no description...
ROOT-OS-UBUNTU-2204-CVE-2026-45956 CVE-2026-45956 in linux - Patched by Root
Root has patched CVE-2026-45956 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2026-64311 CVE-2026-64311 in linux - Patched by Root
Root has patched CVE-2026-64311 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
MiracleLinux 8 : sssd-2.9.4-5.el8_10.5 (AXSA:2026-1443:03)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1443:03 advisory. sssd: sssd: sudo LDAP provider searches entire directory tree for sudoRole objects by default, enabling privilege escalation CVE-2026-14474 sssd:...
MiracleLinux 9 : containernetworking-plugins-1.9.0-3.el9_8 (AXSA:2026-1426:03)
The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1426:03 advisory. net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient...
DEBIAN-CVE-2026-12816
In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split. This issue also affects Bouncy Castle for Java LTS before 2.73.12...
ROOT-OS-DEBIAN-13-CVE-2026-43309 CVE-2026-43309 in rootio-linux - Patched by Root
Root has patched CVE-2026-43309 in the rootio-linux package for Root:Debian:13. Multiple fixed versions available...
Fedora 44 : nebula (2026-12d6749851)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-12d6749851 advisory. Update to 1.11.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...
MiracleLinux 8 : grafana-9.2.10-32.el8_10 (AXSA:2026-1417:20)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1417:20 advisory. github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation CVE-2026-44740 Tenable has extracted the preceding...
Fedora 44 : lemonldap-ng (2026-f9b48b47af)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f9b48b47af advisory. Update to 2.23.2 ---- Update to 2.23.1, fixes CVE-2026-12804 Tenable has extracted the preceding description block directly from the Fedora security...
RHSA-2026:48586 Red Hat Security Advisory: hplip security update
Bulletin has no description...
RHSA-2026:42899 Red Hat Security Advisory: java-25-openjdk security update
Bulletin has no description...
RockyLinux 10 : nodejs22 (RLSA-2026:48033)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:48033 advisory. brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity CVE-2026-13149 tar: Node-tar: Denial of Service via malformed ta...
CVE-2026-54522
CVE-2026-54522 affects MessagePack for Ruby prior to 1.8.2, where MessagePack::Buffer#clear can leave internal rmem pointers stale after a chunk return, enabling a subsequent Buffer#write to alias the freed page and potentially disclose or corrupt cross-buffer data. Root cause: stale rmem_last/rm...
RHSA-2026:47915 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Bulletin has no description...