30151 matches found
Oracle Linux 10 : poppler (ELSA-2026-0128)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-0128 advisory. 24.02.0-7 - Check bitmap in combine - Resolves: RHEL-131783, RHEL-131782 Tenable has extracted the preceding description block directly from the Oracle Linux...
OPENSUSE-SU-2026:10008-1 gpsd-3.27.3-1.1 on GA media
These are all security issues fixed in the gpsd-3.27.3-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10007-1 c-ares-devel-1.34.6-1.1 on GA media
These are all security issues fixed in the c-ares-devel-1.34.6-1.1 package on the GA media of openSUSE Tumbleweed...
EUVD-2026-0805
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2025. Notes: none...
EUVD-2026-0802
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2025. Notes: none...
EUVD-2026-0811
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2024. Notes: none...
EUVD-2026-0810
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2024. Notes: none...
CLSA-2025-1767001828 webkit2gtk3: Fix of 15 CVEs
Update to 2.50.3 - Fix multiple security issues that could lead to crashes, memory corruption, or information disclosure when processing malicious web content: - CVE-2025-66287 - CVE-2025-43458 - CVE-2025-43421 - CVE-2025-13947 - Includes fixes previously released in version 2.50.2: -...
Grok apologizes for creating image of young girls in “sexualized attire”
Another AI system designed to be powerful and engaging ends up illustrating how guardrails routinely fail when development speed and feature races outrun safety controls. In a post on X, AI chatbot Grok confirmed that it generated an image of young girls in “sexualized attire.” The potential...
PT-2026-1422
CVE-2025-69290 - Apache Unassigned Vulnerability CVE ID : CVE-2025-69290 Published : Jan. 5, 2026, 7:15 p.m. | 2 hours, 35 minutes ago Description : Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues...
RHEL 9 : thunderbird (RHSA-2026:0004)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:0004 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: Memory safety bugs fixed in Firefox ESR 140.6,...
RHEL 8 : thunderbird (RHSA-2026:0022)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:0022 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: Memory safety bugs fixed in Firefox ESR 140.6,...
RHEL 9 : thunderbird (RHSA-2026:0020)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:0020 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: Memory safety bugs fixed in Firefox ESR 140.6,...
RHEL 8 : thunderbird (RHSA-2026:0023)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:0023 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: Memory safety bugs fixed in Firefox ESR 140.6,...
Amazon Linux 2 : grub2, --advisory ALAS2-2025-3107 (ALAS-2025-3107)
The version of grub2 installed on the remote host is prior to 2.06-14. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3107 advisory. A vulnerability has been identified in the GRUB2 bootloader's network module that poses an immediate Denial of Service DoS...
OPENSUSE-SU-2026:10004-1 fluidsynth-2.5.2-1.1 on GA media
These are all security issues fixed in the fluidsynth-2.5.2-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10003-1 python311-marshmallow-3.26.2-1.1 on GA media
These are all security issues fixed in the python311-marshmallow-3.26.2-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-5018
Name of the Vulnerable Software and Affected Versions Xen affected versions not specified Description The issue relates to the context switch logic within Xen. Specifically, Xen attempts to skip an IBPB Instruction Barrier Page Base when a virtual CPU vCPU returns to a CPU it previously ran on...
SQLite report about CVE-2026-11822
An attacker who can execute arbitrary SQL for example via SQL injection on a system that has the SQLITEDBCONFIGDEFENSIVE disabled and which has FTS5 enabled, can cause a write off the end of a heap buffer...