Astra Linux – Vulnerability in Linux

A flaw was discovered in the Nosy driver within the Linux kernel. This issue allows a device to be inserted twice into a doubly-linked list, resulting in a “use-after-free” condition when one of these devices is removed. The most significant threat posed by this vulnerability relates to...

Astra Linux – Vulnerability in avahi

A flaw was discovered in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket is not handled correctly in the clientwork function, allowing a local attacker to trigger an infinite loop. The most significant threat from this...

Astra Linux – Vulnerability in openjpeg2

There is a flaw in openjpeg in versions prior to 2.4.0, located in src/lib/openjp2/pi.c. When an attacker can provide crafted input that is processed by the openjpeg encoder, it may lead to an out-of-bounds read. The most significant impact of this flaw is the application’s availability...

Astra Linux – Vulnerability in openexr

A flaw was discovered in OpenEXR’s TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single-part non-image file to have it processed by OpenEXR, resulting in a floating-point exception error. The greatest threat posed by this vulnerability is to system availabili...

Astra Linux – Vulnerability in libwebp

A flaw was discovered in libwebp in versions prior to 1.0.1. When reading a file, libwebp allocates an excessive amount of memory. The greatest threat posed by this vulnerability is related to service availability...

Astra Linux – Vulnerability in libwebp

A flaw was discovered in libwebp in versions prior to 1.0.1. An out-of-bounds read was identified in the ChunkVerifyAndAssign function. The greatest threat posed by this vulnerability is related to data confidentiality and service availability...

Astra Linux – Vulnerability in Linux

A flaw was discovered in the Linux kernel. A memory use-after-free vulnerability was identified in the perf subsystem, allowing a local attacker with permission to monitor perf events, thereby corrupting memory and potentially escalating privileges. The most significant threat of this vulnerabili...

EUVD-2026-77363

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to parse Markdown autolinks with unmatched trailing closing parentheses in linear time, which allows an authenticated user with permission to create posts to cause excessive server CPU consumption and...

Vulnerabilities of Cisco IOS XR operating systems, related to insufficient validation of message correctness or data structure, allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Cisco IOS XR operating systems is related to insufficient checks for the correctness of messages or data structures. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of Cisco IOS XR operating systems, related to improper handling of exceptional states, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Cisco IOS XR operating systems is related to improper handling of exceptional states. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

tomcat11-11.0.25-1.1 on GA media (moderate)

tomcat11-11.0.25-1.1 on GA media Announcement ID: openSUSE-SU-2026:11761-1 Rating: moderate Cross-References: CVE-2026-65182 CVE-2026-65183 CVE-2026-65637 CVE-2026-65905 CVE-2026-65927 CVE-2026-66299 CVE-2026-66422 CVE-2026-68525 CVE-2026-68569 CVE-2026-68763 CVE-2026-73180 CVSS scores:...

libBasicUsageEnvironment2-2026.08.25-1.1 on GA media (moderate)

libBasicUsageEnvironment2-2026.08.25-1.1 on GA media Announcement ID: openSUSE-SU-2026:11753-1 Rating: moderate Cross-References: CVE-2026-38998 CVSS scores: CVE-2026-38998 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-38998 SUSE : 8.2...

Linux Distros Unpatched Vulnerability : CVE-2026-90996

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in sssd. A local unprivileged user could send a specially crafted request with a zero- length body to the Network Security Services NSS...

CVE-2026-88995

The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.1 does not properly restrict the data returned by an availability-check request, allowing unauthenticated users to retrieve other customers' appointment details, including free-text booking comments and contact information...

EUVD-2026-76958

The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.1 does not properly restrict the data returned by an availability-check request, allowing unauthenticated users to retrieve other customers' appointment details, including free-text booking comments and contact information...

CVE-2026-88995 Bookit < 2.6.0.1 - Unauthenticated Appointment PII Disclosure via Availability Check

The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.1 does not properly restrict the data returned by an availability-check request, allowing unauthenticated users to retrieve other customers' appointment details, including free-text booking comments and contact information...

CVE-2026-88995 Bookit < 2.6.0.1 - Unauthenticated Appointment PII Disclosure via Availability Check

The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.1 does not properly restrict the data returned by an availability-check request, allowing unauthenticated users to retrieve other customers' appointment details, including free-text booking comments and contact information...

CVE-2026-88995

The Bookit — Booking & Appointment Calendar WordPress plugin, in versions prior to 2.6.0.1 , contains a vulnerability where it fails to properly restrict data returned during an availability-check request . This flaw allows unauthenticated users to retrieve sensitive appointment details belonging...

CVE-2026-88995: Exposure of Sensitive Information to an Unauthorized Actor

The Bookit — Booking & Appointment Calendar WordPress plugin before 2.6.0.1 does not properly restrict the data returned by an availability-check request, allowing unauthenticated users to retrieve other customers' appointment details, including free-text booking comments and contact information...

Fedora 45 : elixir (2026-688dc4a890)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-688dc4a890 advisory. Elixir ver. 1.20.4 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...