17030 matches found
Amazon Corretto Java 8.x < 8.502.07.1 Multiple Vulnerabilities
The version of Amazon Corretto installed on the remote host is 8 prior to 8.502.07.1. It is, therefore, affected by multiple vulnerabilities as referenced in the corretto-8-2026-Jul-21 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produ...
AlmaLinux 8 : kernel (ALSA-2026:42552)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:42552 advisory. kernel: RDMA/mana: Remove user triggerable WARNON in manaibcreateqprss CVE-2026-46117 kernel: Bluetooth: l2cap: Add missing chan lock in...
Oracle Linux 8 : pacemaker (ELSA-2026-39322)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-39322 advisory. - Fix integer overflows in remote message decompression code CVE-2026-10649 Tenable has extracted the preceding description block directly from the Oracle Linu...
RockyLinux 8 : webkit2gtk3 (RLSA-2026:42088)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:42088 advisory. Mozilla: Arbitrary JavaScript execution in PDF.js CVE-2024-4367 webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash...
Oracle Linux 8 : .NET / 10.0 (ELSA-2026-41900)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-41900 advisory. 10.0.110-1.0.1 - Add support for Oracle Linux 10.0.110-1 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192459 Tenable has extract...
libtiff security update
4.4.0-18.1 - fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 RHEL-189387...
Security update for libkrun (important)
openSUSE Security Update: Security update for libkrun Announcement ID: openSUSE-SU-2026:0255-1 Rating: important References: 1270198 1270429 1270470 1270582 1270683 1270721 1270831 1270877 Cross-References: CVE-2025-24898 CVE-2026-41676 CVE-2026-41677 CVE-2026-41678 CVE-2026-41681 CVE-2026-41898...
Security update for python-aiohttp (important)
openSUSE security update: security update for python-aiohttp ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21372-1 Rating: important References: bsc1268398 bsc1268543 bsc1268544 bsc1268549 bsc1268556 bsc1268559 bsc1268560 bsc1268561...
GHSA-8Q5V-6PQQ-X66H Microsoft Security Advisory CVE-2026-50525 – .NET Denial of Service Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET XML Encryption System.Security.Cryptography.Xml. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A denial ...
Microsoft Security Advisory CVE-2026-50525 – .NET Denial of Service Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET XML Encryption System.Security.Cryptography.Xml. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A denial ...
GHSA-G8R8-53C2-PM3F Microsoft Security Advisory CVE-2026-47304 – .NET Security Feature Bypass Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET XML Encryption System.Security.Cryptography.Xml. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A securit...
EUVD-2026-42311
protobufjs: Text Format string map parsing can mutate returned map object prototype...
EUVD-2026-42341
Astro: Authorization Bypass via Decode Iteration Limit and Rewrite Path Canonicalization Mismatch...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: dotnet8.0: aspnetcore-runtime-8.0-8.0.29-2.1.hum1 aarch64, x8664 aspnetcore-runtime-dbg-8.0-8.0.29-2.1.hum1 aarch64, x8664 aspnetcore-targeting-pack-8.0-8.0.29-2.1.hum1 aarch64, x8664...
nodejs:22 security, bug fix, and enhancement update
An update is available for module.nodejs, nodejs, module.nodejs-packaging, nodejs-packaging, nodejs-nodemon, module.nodejs-nodemon. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
CVE-2026-39879 SQL injection in syslog-ng SQL destionation driver
Due to a missing sanitization call in afsqlddrunquery, syslog-ng before 4.12 are vulnerable to SQL injection from an untrusted source. This is not part of the default configuration, the SQL driver has to be manually configured. Fixes are in syslog-ng 4.12, syslog-ng Premium Edition 8.2 and...
CVE-2026-39879 SQL injection in syslog-ng SQL destionation driver
Due to a missing sanitization call in afsqlddrunquery, syslog-ng before 4.12 are vulnerable to SQL injection from an untrusted source. This is not part of the default configuration, the SQL driver has to be manually configured. Fixes are in syslog-ng 4.12, syslog-ng Premium Edition 8.2 and...
CVE-2026-35048
The CVE affects the Piwigo installer (versions 16.3.0 and earlier) where POST parameters for database configuration are written directly into local/config/database.inc.php without proper sanitization. The issue arises because on PHP 8+, addslashes() no longer provides protection after get_magic_q...
CVE-2026-35591 Possible heap-based buffer overflow when decoding TIFF image containing well-crafted tile
libvips is a fast image processing library with low memory needs. The tiffload operation in libvips versions before and including 8.18.1 could incorrectly determine the number of channels in a JPEG or JPEG2000-encoded tile within a TIFF image, leading to a possible buffer overflow. This has been...