23986 matches found
Important: Red Hat Security Advisory: perl:5.32 security update
An update for the perl:5.32 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
PT-2026-66405
Name of the Vulnerable Software and Affected Versions Spring Tools for Eclipse versions prior to 5.2.1 Description The Boot Dashboard Docker integration publishes container control ports on all host network interfaces 0.0.0.0 instead of restricting them to the loopback interface. This configurati...
PT-2026-66534
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flacc...
Fedora 44 : valkey (2026-3d18a65cc4)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3d18a65cc4 advisory. Valkey 9.0.5 - Released Tue 21 July 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible...
RockyLinux 8 : perl:5.32 (RLSA-2026:48225)
The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:48225 advisory. perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size CVE-2026-9538 Tenable has extracted the preceding description...
Fedora 45 : python3.12 (2026-05338c2e02)
The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-05338c2e02 advisory. Automatic update for python3.12-3.12.13-6.fc45. Changelog Tue Jul 28 2026 Luk Zachar - 3.12.13-6 - Security fix for CVE-2026-15308 Resolves: rhbz2498688 Tue...
mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string()
A flaw was found in MariaDB server. An application processing non-validated user input, which then uses mysqlrealescapestring and sends data to the database via text protocol with the big5 character set, is vulnerable to SQL injection. This allows a remote attacker to execute malicious SQL...
EUVD-2026-50443
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, HttpContentEncoder the superclass of the production handler HttpContentCompressor maintains a per-channel ArrayDeque named acceptEncodingQueue that accumulates attacker-controll...
CVE-2026-54727
proot-distro is a utility for managing proot containers. Prior to version 5.1.6, proot-distro restore accepted hardlink entries whose linkname referenced another installed container and did not verify that the hardlink source container matched the destination container being restored, allowing a...
CVE-2026-67191
Xlight FTP Server prior to 3.9.5 is affected by a pre-authentication heap buffer overflow in the SSH parser. A logic error in the recv loop termination (OR instead of AND) enables exploitation on any SSH or SFTP connection before authentication, allowing remote unauthenticated access with high im...
CVE-2026-67213
nanoid Nano ID before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions. When these functions are configured with a size of 0, the internal generation loop never satisfies its exit condition and spins indefinitely, hanging the calling thread. An application that...
CVE-2015-8778
creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:46+00:00| seen| Telegram/nEfx4bkJlcldrL4ooYbVX-cKtKfFWPCKK6-GEAcf7FF 2026-07-30 00:02:02+00:00| seen| Telegram/nEfx4bkJlcldrL4ooYbVX-cKtKfFWPCKK6-GEAcf7FF 2026-08-01 15:00:04+00:00| seen|...
CVE-2022-0558
creationtimestamp| type| source ---|---|--- 2026-07-29 12:00:07+00:00| seen| https://t.me/CVEhub/18972 2026-07-30 00:00:24+00:00| published-proof-of-concept| https://t.me/CVEhub/18972...
CVE-2026-64439
A flaw was found in the Linux kernel's Kerberos 5 krb5 cryptography module. This use-after-free vulnerability occurs when an asynchronous Authenticated Encryption with Associated Data AEAD instance is used. The system prematurely frees a memory buffer while a backend process still holds a pointer...
SUSE SLED15: java-25-openjdk / java-25-openjdk-demo / java-25-openjdk-devel / etc (SUSE-SU-2026:3331-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3331-1 advisory. Update to upstream tag jdk-25.0.4+7 July 2026 CPU. Security issues fixed: - CVE-2026-41254: lcms: information...
RHEL 9 : kpatch-patch (RHSA-2026:47997)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:47997 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module ...
SUSE SLES12 Security Update : kernel (Live Patch 76 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2026:3388-1)
The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3388-1 advisory. This update for the SUSE Linux Enterprise Kernel 4.12.14-122.290 fixes various security issues: The following security issues were fixed: -...
VMSA-2026-0006.1: VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities (CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709)
Advisory ID: | VMSA-2026-0006.1 ---|--- Advisory Severity: | Critical CVSSv3 Range: | 2.7-9.8 Synopsis: | VMware ESX, vCenter, Workstation, and Fusion updates address multiple vulnerabilities CVE-2026-59309, CVE-2026-59310, CVE-2026-47876, CVE-2026-41703, CVE-2026-41709 Issue date: | 2026-07-29...
CVE-2026-66063 goshs has a Path Traversal issue
goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/updown.go multipart upload handler split part.FileName on / but did not reject .., allowing an unauthenticated upload with filename .. to create a file outside the served tree. This...