EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2766)

According to the versions of the packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzmaindexdecoder was used ...

Amazon Linux 2 : amazon-ssm-agent, --advisory ALAS2-2026-3809 (ALAS-2026-3809)

The version of amazon-ssm-agent installed on the remote host is prior to 3.3.4624.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3809 advisory. An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbound...

EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2721)

According to the versions of the package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4, any...

Debian dla-4690 : liblzma-dev - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4690 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4690-1 [email protected] https://www.debian.org/lts/security/...

Amazon Linux 2 : glib2, --advisory ALAS2-2026-3803 (ALAS-2026-3803)

The version of glib2 installed on the remote host is prior to 2.56.1-9. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3803 advisory. A flaw was found in GLib. A state confusion issue exists in gdbusnodeinfonewforxml in the gio/gdbusintrospection.c file when...

EulerOS Virtualization 2.12.0 : systemd (EulerOS-SA-2026-2808)

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient...

EulerOS Virtualization 2.12.0 : avahi (EulerOS-SA-2026-2767)

According to the versions of the avahi package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Avahi is a system which facilitates service discovery on a local network via the mDNS/DNS-SD protocol suite. Prior to version 0.9-rc4...

EulerOS Virtualization 2.12.0 : xz (EulerOS-SA-2026-2812)

According to the versions of the xz packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : XZ Utils provide a general-purpose data-compression library plus command-line tools. Prior to version 5.8.3, if lzmaindexdecoder was us...

PT-2026-61996

Name of the Vulnerable Software and Affected Versions Eclipse OpenJ9 versions prior to 0.61 Description Using the -Xtrace option to trace method arguments can lead to a buffer underflow. A buffer underflow occurs when a program reads data from a memory address before the start of the intended...

PT-2026-62091

SQL Injection vulnerability in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the getPageData method in the DatacenterQuery.java file...

CVE-2026-52476

SQL Injection vulnerability in aiflowy = 2.1.2 allows a remote attacker to obtain sensitive information via the getPageData method in the DatacenterQuery.java file...

PT-2026-62111

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to versions 1.5.10.1832 and 1.6.0-beta.2313, the buildRow method in fogpage.class.php substitutes data values into HTML table cell templates using str replace without any HTML escaping. An unauthenticated...

PT-2026-61867

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Firefox ESR versions prior to 115.38 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird version prior to 140.13 Description A JIT miscompilation issue exists within the JIT componen...

EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2723)

According to the versions of the packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Using libcurl, when a custom Host: header is first set for an HTTP request and a second request is subsequently done using the same easy...

EulerOS Virtualization 2.12.0 : curl (EulerOS-SA-2026-2769)

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Using libcurl, when a custom Host: header is first set for an HTTP request and a second request is subsequently done using the same...

EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2762)

According to the versions of the packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in systemd. The systemd-machined service contains an Improper Access Control vulnerability due to insufficient validation...

PT-2026-62395

Name of the Vulnerable Software and Affected Versions Oracle WebLogic Server versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0 Description A flaw in the Core component of Oracle Fusion Middleware allows a low privileged attacker with network access via RMI Remote Method Invocation, a Jav...

PT-2026-61922

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Thunderbird versions prior to 153 Description A JIT miscompilation issue exists within the JIT component of the JavaScript Engine. JIT Just-In-Time compilation is a method used by the engine to improve performance...

PT-2026-61904

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Thunderbird versions prior to 153 Description A JIT miscompilation issue exists within the JIT component of the JavaScript Engine. JIT Just-In-Time compilation is a method used by the engine to improve performance...

PT-2026-61955

Ninja Forms WordPress plugin version 3.14.8 and prior contains an improper input validation vulnerability that allows unauthenticated attackers to inject arbitrary numeric values into form calculations and payment totals by submitting values that do not match any configured option in ListSelect o...