Lucene search
+L

1610 matches found

Tenable Nessus
Tenable Nessus
added 2026/07/28 12:00 a.m.10 views

MiracleLinux 8 : dotnet8.0-8.0.129-1.el8_10.ML.1 (AXSA:2026-1370:14)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1370:14 advisory. dotnet: SocketsHttpHandler Http2Connection - HTTP/2 SETTINGS/PING ACK flood causing OOM CVE-2026-50651 dotnet: .NET Core: Denial of Service via type...

9.8CVSS7.6AI score0.01105EPSS
SaveExploits0References18
Tenable Nessus
Tenable Nessus
added 2026/07/23 12:00 a.m.17 views

Fedora 44 : perl-YAML-Syck (2026-2139aa7dce)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-2139aa7dce advisory. This update addresses four libsyck memory-safety CVEs reachable from the default YAML::Syck::Load path on untrusted input with no special flags:...

9.1CVSS5.9AI score0.00374EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/07/23 12:00 a.m.13 views

Fedora 44 : chromium (2026-310f620a68)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-310f620a68 advisory. Update to 150.0.7871.128 CVE-2026-15899: Use after free in CameraCapture CVE-2026-15900: Use after free in GPU CVE-2026-15901: Use after free in...

9.6CVSS5.9AI score0.00573EPSS
SaveExploits1References8
OSV
OSV
added 2026/07/15 6:05 a.m.13 views

SUSE-SU-2026:3002-1 Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.115 fixes various security issues The following security issues were fixed: - CVE-2026-46120: ip6gre: Use cached t-net in ip6erspanchangelink bsc1267893. - CVE-2026-46173: exit: prevent preemption of oopsing TASKDEAD task bsc1267723...

7.8CVSS6.1AI score0.00265EPSS
SaveExploits1References13
OSV
OSV
added 2026/07/09 10:08 a.m.17 views

CLEANSTART-2026-FY61868 Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.2-r0, 1.13.2-r1

Multiple security vulnerabilities affect the velero-plugin-for-microsoft-azure-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

9CVSS6.9AI score0.00728EPSS
SaveExploits0References13
Qualys Blog
Qualys Blog
added 2026/07/08 5:38 p.m.14 views

FortiBleed: Credential Reuse, Legacy Hashes, and the Risk of Internet-Exposed FortiGate Devices

Key Takeaways FortiBleed refers to June 2026 public reporting of large-scale credential exposure and abuse targeting internet-reachable FortiGate management and SSL-VPN gateways driven by credential reuse and brute-force, not a single new zero-day. Risk is highest for internet-exposed FortiGate...

9.8CVSS7.1AI score0.86088EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2026/07/06 12:00 a.m.16 views

Fedora 44 : nextcloud (2026-ee50c21f92)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ee50c21f92 advisory. 33.0.6 Release Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

9.8CVSS7.2AI score0.0102EPSS
SaveExploits11References22
Oracle linux
Oracle linux
added 2026/07/01 12:00 a.m.16 views

freerdp security update

2.1.1-5.0.9 - Fixed CVE-2026-25952 CVE-2026-26986 CVE-2026-27951 CVE-2026-29775 CVE-2026-31883 CVE-2026-31884 CVE-2026-31885 CVE-2026-33985 Orabug: 39440279 2.1.1-5.0.7 - Fixed CVE-2026-22852 CVE-2026-22854 CVE-2026-22856 CVE-2026-23732 CVE-2026-23948 CVE-2026-24491 CVE-2026-24675 CVE-2026-24676...

9.8CVSS6.6AI score0.02012EPSS
SaveExploits25
OSV
OSV
added 2026/07/01 12:00 a.m.18 views

ALSA-2026:34355 Moderate: mod_http2 security, bug fix, and enhancement update

The modh2 Apache httpd module implements the HTTP2 protocol h2+h2c on top of libnghttp2 for httpd 2.4 servers. Security Fixes: httpd: modhttp2: Apache HTTP Server modhttp2: Use After Free vulnerability allows arbitrary code execution or denial of service. CVE-2026-48913 httpd: Apache HTTP Server:...

7.3CVSS6.4AI score0.00545EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/01 12:00 a.m.15 views

ALSA-2026:34359 Important: opentelemetry-collector security update

Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fixes: github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint CVE-2026-42154 github.com/prometheus/prometheus: Prometheus: Information...

9.6CVSS7.5AI score0.00813EPSS
SaveExploits0References14
OPENSUSE Linux
OPENSUSE Linux
added 2026/06/30 12:00 a.m.10 views

Security update for MozillaFirefox (important)

openSUSE security update: security update for mozillafirefox ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21043-1 Rating: important References: bsc1268071 Cross-References: CVE-2026-12289 CVE-2026-12290 CVE-2026-12291 CVE-2026-12292 CVE-2026-1229...

9.1CVSS5.8AI score0.00493EPSS
SaveExploits2References1
Circl
Circl
added 2026/06/28 9:00 p.m.20 views

CVE-2026-8383

creationtimestamp| type| source ---|---|--- 2026-06-28 21:00:03+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-8383.yaml 2026-06-29 00:00:03+00:00| confirmed|...

5.3CVSS5.8AI score0.07623EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/06/26 12:00 a.m.17 views

Oracle Linux 9 : openssl (ELSA-2026-25239)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-25239 advisory. - Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,...

9.1CVSS7.2AI score0.03566EPSS
SaveExploits0References16
OPENSUSE Linux
OPENSUSE Linux
added 2026/06/25 12:00 a.m.6 views

Security update for mbedtls (important)

openSUSE Security Update: Security update for mbedtls Announcement ID: openSUSE-SU-2026:0214-1 Rating: important References: 1245808 1245809 1245810 1245811 1252454 1261527 Cross-References: CVE-2025-49600 CVE-2025-49601 CVE-2025-52496 CVE-2025-52497 CVE-2025-59438 CVE-2026-34874 CVSS scores:...

8.7CVSS6.4AI score0.00279EPSS
SaveExploits1References6
OSV
OSV
added 2026/06/19 12:01 a.m.16 views

RLSA-2026:26709 Important: xorg-x11-server security, bug fix, and enhancement update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fixes: xorg-x11-server: xorg-x11-server-Xwayland: xorg-x11-server: stack buffer overflow in font alias resolution du...

7.8CVSS5.7AI score0.00165EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
added 2026/06/15 12:00 a.m.13 views

Oracle Linux 8 : webkit2gtk3 (ELSA-2026-25918)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-25918 advisory. 2.52.4-1 - Update to 2.52.4 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus h...

8.8CVSS6.8AI score0.00693EPSS
SaveExploits0References17
NVD
NVD
added 2026/06/12 4:16 p.m.20 views

CVE-2026-50083

The Aqara IAM/SSO Gateway gw-builder.aqara.com used a hardcoded OAuth client credential, which is an instance of "CWE-798: Use of Hard-coded Credentials." This issue has an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N 9.1 Critical. When combined with CVE-2026-50082, CVE-50084, a...

9.8CVSS0.00364EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2026/06/12 12:00 a.m.45 views

PT-2026-48909

Name of the Vulnerable Software and Affected Versions Aqara Board service affected versions not specified Description The Aqara Board service at the endpoint "op-test.aqara.com" accepts arbitrary MQTT command payloads and forwards them to the platform's HiveMQ broker without authentication. This...

9.8CVSS5.4AI score0.00412EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
added 2026/06/12 12:00 a.m.30 views

Fedora 44 : openssl (2026-228373a496)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-228373a496 advisory. Rebase to OpenSSL 3.5.7 Fixes CVE-2026-45447 Fixes CVE-2026-34182 Fixes CVE-2026-34183 Fixes CVE-2026-42764 Fixes CVE-2026-45445 Fixes CVE-2026-7383...

9.1CVSS5.4AI score0.03566EPSS
SaveExploits0References16
Positive Technologies
Positive Technologies
added 2026/06/12 12:00 a.m.30 views

PT-2026-48907

The Aqara IAM/SSO Gateway gw-builder.aqara.com used a hardcoded OAuth client credential, which is an instance of "CWE-798: Use of Hard-coded Credentials." This issue has an estimated CVSS of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N 9.1 Critical. When combined with CVE-2026-50082, CVE-50084, a...

9.8CVSS5.4AI score0.00364EPSS
SaveExploits1References4
Rows per page
Query Builder