1199816 matches found
Oracle Linux 8 : attr (ELSA-2026-56133)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-56133 advisory. - rebase to 2.6.0 to fix the following CVEs: - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr RHEL-186121 Tenable has extracted the...
RHEL 9 : gegl04 (RHSA-2026:56963)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:56963 advisory. GEGL Generic Graphics Library is a graph-based image processing framework. Security Fixes: gimp: GIMP: Arbitrary code execution via heap-based buffe...
Linux Distros Unpatched Vulnerability : CVE-2026-73502
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kin-openapi is a Go project for handling OpenAPI files. From 0.2.0 until 0.144.0, openapi3filter.ValidateRequest can encounter a NULL-pointer-dereference denial...
Linux Distros Unpatched Vulnerability : CVE-2026-18688
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of- bounds memory read by providing a specially formed...
CVE-2026-51367
Bottinelli Informatica Vedo Suite v.1.2.5 is vulnerable at the api_vedo/chat endpoint; the utente_chat parameter allows a remote attacker to obtain sensitive information, indicating an Insecure Direct Object Reference (IDOR) issue. No patch version, exploit details, or in-the-wild exploitation ar...
The vulnerability of the NewKeyring() function in the Go programming language allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the NewKeyring function in the Go programming language is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
Oracle Linux 8 : python3 (ELSA-2026-56219)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-56219 advisory. 3.6.8-78.0.1 - Add Oracle Linux distribution in platform.py Orabug: 20812544 3.6.8.openela.0 - Add openela to supported dists 3.6.8-78 - Security fix for...
Splunk Universal Forwarder 9.4.0 < 9.4.14, 10.0.0 < 10.0.9, 10.2.0 < 10.2.6, 10.4.0 < 10.4.2 (SVD-2026-0803)
The version of Splunk installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the SVD-2026-0803 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...
ALSA-2026:57148 Important: ansible-core security update
Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...
RHEL 7 : java-1.8.0-openjdk (RHSA-2026:55774)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55774 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security...
RHEL 10 / 8 / 9 : java-21-openjdk (RHSA-2026:55787)
The remote Redhat Enterprise Linux 10 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55787 advisory. The OpenJDK 21 packages provide the OpenJDK 21 Java Runtime Environment and the OpenJDK 21 Java Software Development Kit. Security...
Security Advisory 0146
Security Advisory 0146 PDF Date: August 19, 2026 Revision | Date | Changes ---|---|--- 1.0 | August 19, 2026 | Initial release Description Arista Networks is providing this security update in response to the following list of gRPC-go security vulnerabilities posted by Google at...
PT-2026-78358
Name of the Vulnerable Software and Affected Versions Dell OpenManage Enterprise versions prior to 4.7.0 Description An OS Command Injection issue exists where special elements used in an OS command are not properly neutralized. A low privileged attacker with remote access can exploit this flaw t...
UBUNTU-CVE-2026-74960
Site isolation issue in the WebExtensions component. This vulnerabilit...
UBUNTU-CVE-2026-74968
Site isolation issue in the Graphics: WebRender component. This vulner...
UBUNTU-CVE-2026-74980
Clickjacking issue in the Downloads component in Firefox for Android...
UBUNTU-CVE-2026-74962
Site isolation issue in the Networking: Cookies component. This vulner...
CVE-2026-74968
Site isolation issue in the Graphics: WebRender component. This vulner...