ROS-20260925-73-0136

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

Python-daphne HTTP Request Smuggling

The vulnerability of the asynchronous Python-daphne web server is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests remotely a type of HTTP request smuggling attack...

Kibana XSS

The vulnerability of the Kibana data visualization service is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Kibana Visualization Unauthorized Access

The vulnerability of the Kibana visualization service’s object identifier handling mechanism relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenJDK 8 vulnerabilities (USN-8784-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8784-1 advisory. Kai Aizen discovered that the Networking component of OpenJDK 8 did not correctly handle user...

Fedora 46 : golang-x-image (2026-2d6aee1dc4)

The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-2d6aee1dc4 advisory. Automatic update for golang-x-image-0.46.0-2.fc46. Changelog Fri Sep 25 2026 lex Sez - 0.46.0-2 - Add requiresexclude Fri Sep 25 2026 Packit -...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : rsyslog vulnerability (USN-8786-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8786-1 advisory. It was discovered that rsyslog incorrectly calculated buffer sizes when replacing strings. A remote...

Linux Distros Unpatched Vulnerability : CVE-2026-95835

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing Authorization in the askpass escape code handler in kitty from 0.25.0 before 0.49.0 allows a local user other than the one running the terminal to obtai...

Oracle Linux 7 : yelp (ELSA-2026-57417)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-57417 advisory. 2:3.28.1-1.0.1 - Backport fix for CVE-2026-13601 Orabug: 39908376 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : Memcached vulnerability (USN-8792-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8792-1 advisory. It was discovered that Memcached incorrectly handled ASCII authentication. A remote attacker could possibly use this issue to cause...

Linux Distros Unpatched Vulnerability : CVE-2026-91187

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Verification of Cryptographic Signature vulnerability in dashbit nimblezta allows an unauthenticated remote attacker to authenticate as an arbitrary...

ROS-20260925-73-0129

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

CVE-2026-51773

An issue in the VMware datastore driver of OpenStack glancestore. When an authenticated attacker provides a maliciously crafted image location URI pointing to an external server, the retryrequest function fails to validate the destination host before attaching sensitive authentication headers...

ROS-20260925-73-0191

The vulnerability of thehdrfinde function in the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

ROS-20260925-73-0092

The vulnerability of the switchto function in the arch/arm/kernel/entry-armv.S module of the Linux operating system is related to buffer overflow in the stack. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

Kibana Data Visualization Token Timestamp Disclosure

The vulnerability of the Kibana data visualization service is related to the improper processing of token timestamps. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information...

ROS-20260925-73-0055

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

ROS-20260925-73-0074

The vulnerability of the safexcelprobegeneric function in the Linux operating system is related to state management errors. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Linux Distros Unpatched Vulnerability : CVE-2026-97607

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vdpa: ifcvf: Put device on unsupported feature error Route unsupported provisioned features through the common error path after vdpaallocdevice so the allocated...

Oracle Linux 9 : perl-DBI (ELSA-2026-71422)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-71422 advisory. 1.643-9.6 - Force placeholder limit on : and :p too CVE-2026-73194 Related: RHEL-247327 Tenable has extracted the preceding description block directly from the...