51425 matches found
MiracleLinux 8 : open-vm-tools-12.1.5-2.el8.3.ML.1 (AXSA:2023-6434:09)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6434:09 advisory. open-vm-tools: SAML token signature bypass CVE-2023-20900 Tenable has extracted the preceding description block directly from the MiracleLinux security...
Mageia: Security Advisory (MGASA-2026-0013)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MiracleLinux 8 : fwupd-1.1.4-7.0.1.el8, grub2-2.02-87.0.1.el8, shim-15-15.0.1, shim-unsigned-x64-15-8.0.1.el8 (AXSA:2020-773:01)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-773:01 advisory. grub2: Crafted grub.cfg file can lead to arbitrary code execution during boot process CVE-2020-10713 grub2: grubmalloc does not validate allocation...
MiracleLinux 9 : skopeo-1.16.1-2.el9_5 (AXSA:2024-9497:07)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-9497:07 advisory. encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion CVE-2024-34156...
PT-2026-3687
Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.44 Oracle MySQL versions 8.4.0 through 8.4.7 Oracle MySQL versions 9.0.0 through 9.5.0 Description A flaw exists in the Server: DDL component of Oracle MySQL Server that allows a high-privileged attacker...
PT-2026-3722
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.29 and 21.3-21.20. Easily exploitable vulnerability allows high privileged attacker having Authenticated User privilege with network access via Oracle Net to compromise Java VM...
PT-2026-3678
Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11 Description An easily exploitable issue exists in the Kernel component of Oracle Solaris that allows an unauthenticated attacker with network access via TCP to compromise the system. Successful attacks can result in...
PT-2026-3697
Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u471-b50 Description A difficult-to-exploit issue exists in Oracle Java SE JavaFX component that allows an unauthenticated attacker with network access, via multiple protocols, to compromise the software. Successful...
PT-2026-3689
Name of the Vulnerable Software and Affected Versions Oracle Database Server versions 23.4.0 through 23.26.0 Description A difficult-to-exploit issue exists within the SQLcl component that allows an unauthenticated attacker, with access to the infrastructure where SQLcl runs, to compromise SQLcl...
Oracle Virtualization security vulnerabilities
Oracle Virtualization is a virtualization solution developed by Oracle, a US-based company. This product is used for unified management of the entire hardware and software system, from applications to disks, enabling virtualization across both desktops and data centers. VM VirtualBox is one of th...
PT-2026-3724
Vulnerability in the Oracle Zero Data Loss Recovery Appliance Software product of Oracle Zero Data Loss Recovery Appliance component: Security. Supported versions that are affected are 23.1.0-23.1.202509. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...
PT-2026-3691
Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.44 Oracle MySQL versions 8.4.0 through 8.4.7 Oracle MySQL versions 9.0.0 through 9.5.0 Description An issue exists in the Server: Optimizer component of Oracle MySQL Server that allows a high-privileged...
PT-2026-3647
A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to perform an SQL injection attack against an affected device. To exploit this vulnerability, the attacker must have valid user credentials on the affected device. This...
MiracleLinux 8 : dotnet6.0-6.0.106-1.el8.ML.1 (AXSA:2022-3758:09)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3758:09 advisory. dotnet: NuGet Credential leak due to loss of control of third party symbol server domain CVE-2022-30184 Tenable has extracted the preceding description block...
MiracleLinux 8 : glibc-2.28-251.el8_10.22 (AXSA:2025-10009:07)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10009:07 advisory. glibc: static setuid binary dlopen may incorrectly search LDLIBRARYPATH CVE-2025-4802 Tenable has extracted the preceding description block directly from th...
MiracleLinux 7 : pesign-0.109-11.el7 (AXSA:2023-5211:03)
The remote MiracleLinux 7 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-5211:03 advisory. pesign: Local privilege escalation on pesign systemd service CVE-2022-3560 Tenable has extracted the preceding description block directly from the MiracleLin...
PT-2026-3666
Name of the Vulnerable Software and Affected Versions Milner ImageDirector Capture versions 7.0.9 through 7.6.3.25808 Description A flaw exists in Milner ImageDirector Capture that involves insufficiently protected credentials within the credential field. This allows for the retrieval of credenti...
CVE-2026-1175 birkir prime GraphQL Directive graphql information exposure
A vulnerability was identified in birkir prime up to 0.4.0.beta.0. This impacts an unknown function of the file /graphql of the component GraphQL Directive Handler. Such manipulation leads to information exposure through error message. The attack may be performed from remote. The exploit is...
CVE-2026-1171 birkir prime GraphQL Field graphql denial of service
A flaw has been found in birkir prime up to 0.4.0.beta.0. Impacted is an unknown function of the file /graphql of the component GraphQL Field Handler. Executing a manipulation can lead to denial of service. The attack may be launched remotely. The exploit has been published and may be used. The...
