46933 matches found
MINI-9VXQ-6M6F-62G3
Bulletin has no description...
SUSE CVE-2026-80489
unknown...
CVE-2025-52399
creationtimestamp| type| source ---|---|--- 2026-09-02 01:00:08+00:00| seen| Telegram/CgARV4OZCuudPGDKISJhjha4PgcfYLOsEkEYqjMAjRJh6A 2026-09-03 00:00:56+00:00| published-proof-of-concept| Telegram/CgARV4OZCuudPGDKISJhjha4PgcfYLOsEkEYqjMAjRJh6A...
Linux Distros Unpatched Vulnerability : CVE-2026-84639
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Triggering an error condition in certain MIME bodies would cause uninitialized memory to be used. This vulnerability was fixed in Thunderbird 155, Thunderbird...
Linux Distros Unpatched Vulnerability : CVE-2026-84136
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Other issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...
Linux Distros Unpatched Vulnerability : CVE-2026-80220
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - prometheus-postgres-exporter - None Ubuntu Linux - Unknown description CVE-2026-80220 Note that Nessus relies on the presence of the package as...
Linux Distros Unpatched Vulnerability : CVE-2026-82209
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute...
Linux Distros Unpatched Vulnerability : CVE-2026-84141
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...
Linux Distros Unpatched Vulnerability : CVE-2026-16658
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...
Linux Distros Unpatched Vulnerability : CVE-2026-82208
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, libcurl can silently reinstall the cached...
Fedora 44 : gdk-pixbuf2 (2026-001de57d4f)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-001de57d4f advisory. Fixes https://access.redhat.com/security/cve/CVE-2026-81893 Tenable has extracted the preceding description block directly from the Fedora security advisory...
Oracle Linux 9 : ELSA-2026-61247-0: / libxml2 (ELSA-2026-612470)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-612470 advisory. - Fix CVE-2026-11979 RHEL-215568 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...
CVE-2026-84372
creationtimestamp| type| source ---|---|--- 2026-09-01 21:43:11+00:00| seen| https://bsky.app/profile/suriq.io/post/3muifb2ywsm2v 2026-09-01 23:01:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muijmrq6t52e 2026-09-02 00:07:37+00:00| seen|...
CVE-2021-38671
creationtimestamp| type| source ---|---|--- 2026-09-01 20:02:22+00:00| seen| https://t.me/hackingAttack/23975 2026-09-02 01:02:52+00:00| seen| https://t.me/hackingAttack/23975 2026-09-07 15:00:06+00:00| seen| https://t.me/hackingAttack/23975 2026-09-08 00:00:41+00:00| seen|...
GHSA-2M8G-3CMR-WG3W Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`
Summary While investigating Django REST Framework's request parsing behavior, I identified that DRF's high-level request.data parsing appears to bypass Django's configured DATAUPLOADMAXMEMORYSIZE protection for application/json and application/x-www-form-urlencoded request bodies. In the tested...
Injection fast-uri Dependency in Jira Service Management Data Center
This High severity Injection vulnerability was introduced in versions 10.2.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0, 10.7.1, 11.0.0, 11.1.0, 11.2.0, and 11.3.0 of Jira Service Management Data Center. This Injection vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...
CVE-2026-18931
creationtimestamp| type| source ---|---|--- 2026-09-01 16:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muhuuzdtt625 2026-09-01 18:08:12+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muhzantma525...
ECHO-123E-142C-BCB7
Bulletin has no description...
CVE-2026-83616
A flaw was found in xmldom, a JavaScript module for parsing and serializing XML. An attacker can exploit a vulnerability in how processing instructions are handled to inject arbitrary XML structures. This occurs because the software fails to properly validate input, allowing special characters to...