43 matches found
MiracleLinux 8 : [security - high] javapackages-tools:201801, xmvn-3.0.0-21.module+el8+2012+08762e87, xz-java-1.8-2.module+el8+2012+08762e87 (AXSA:2026-1424:01)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1424:01 advisory. org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method CVE-2025-67030 Tenable has extracted the preceding description bloc...
com.walterjwhite.java.examples:ssh (0.0.17), com.walterjwhite.java.modules.linux-builder.modules.cli.providers:cdi (0.0.17) +24 more potentially affected by CVE-2026-12860 via org.bouncycastle:bcprov-ext-jdk14 (>=1.45, <=1.72)
org.bouncycastle:bcprov-ext-jdk14 MAVEN version =1.45, =0.1.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-12860 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-18518025...
Linux Distros Unpatched Vulnerability : CVE-2026-59650
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidated peer value. This issue also affects Bouncy Castle for Java LTS before...
acegisecurity:acegi-security-catalina (>=0.7.0, <=0.9.0), ch.qos.logback:logback-access (>=${parent.version}, <=0.8) +40 more potentially affected by CVE-2026-43515 via tomcat:catalina (>=4.0.6, <=5.5.23)
tomcat:catalina MAVEN version =4.0.6, =0.7.0, =$parent.version, =0.6, =3.2.10-1-sp3seam2hibernate5, =1.5, =1.0-m5, =1.0-m5, =1.0.0-rc1, =4.7.1, =4.7.2 - org.apache.geronimo.assemblies:geronimo-tomcat-minimal 1.2-beta - org.apache.geronimo.configs:ca-helper-tomcat 1.2-beta -...
Amazon Linux 2023 : java-11-amazon-corretto, java-11-amazon-corretto-devel, java-11-amazon-corretto-headless (ALAS2023-2026-1685)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1685 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Ja...
Amazon Linux 2023 : java-21-amazon-corretto, java-21-amazon-corretto-devel, java-21-amazon-corretto-headless (ALAS2023-2026-1683)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1683 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Ja...
CVE-2025-50106 vulnerabilities
Vulnerabilities for packages: openjdk...
ae.teletronics.nlp:entityextraction (>=1.3, <=1.4), ai.h2o:h2o-app (>=0.1.22, <=0.1.25) +1041 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcprov-jdk15 (>=1.38, <=1.46)
org.bouncycastle:bcprov-jdk15 MAVEN version =1.38, =1.3, =0.1.22, =0.1.22, =1.0.0, =2.1.0, =1.0.1, =4.2.0, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.1.2, =1.0.3, =1.3.3 and more Source cves: CVE-2025-8916 Source advisory:...
ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1, <=1.0.2), aero.m-click:mcpdf (>=0.2.3, <=0.2.10) +30486 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcprov-jdk15on (>=1.46, <=1.70)
org.bouncycastle:bcprov-jdk15on MAVEN version =1.46, =1.0.1, =0.2.3, =4.4.0.0, =0.42.1, =0.1.12, =0.1.2, =0.28.0, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.3 and more Source cves: CVE-2025-8916 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-11789705...
Fedora: Security Advisory (FEDORA-2025-dbb980101e)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CBL Mariner 2.0 Security Update: CBL-Mariner Releases / javapackages-bootstrap / maven (CVE-2021-26291)
The version of CBL-Mariner Releases / javapackages-bootstrap / maven installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-26291 advisory. - Apache Maven will follow repositories that are defined in a...
Alibaba Cloud Linux 3 : 0171: java-1.8.0-openjdk (ALINUX3-SA-2022:0171)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2022:0171 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2022-21619: Vulnerability in the Oracl...
Alibaba Cloud Linux 3 : 0233: java-1.8.0-openjdk (ALINUX3-SA-2024:0233)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2024:0233 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-48161: Buffer Overflow...
MGASA-2025-0156 Updated java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk & java-latest-openjdk packages fix security vulnerabilities
Better TLS connection support. CVE-2025-21587 Improve compiler transformations. CVE-2025-30691 Enhance Buffered Image handling. CVE-2025-30698 The updated timezone data are needed by the new Java packages...
Updated java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk & java-latest-openjdk packages fix security vulnerabilities
Better TLS connection support. CVE-2025-21587 Improve compiler transformations. CVE-2025-30691 Enhance Buffered Image handling. CVE-2025-30698 The updated timezone data are needed by the new Java packages...
Fedora 39 / 40 : java-1.8.0-openjdk-portable / java-17-openjdk-portable (2025-5c15947cd4)
The remote Fedora 39 / 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-5c15947cd4 advisory. April 2025 CPU Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for thi...
com.github.sakserv:hadoop-mini-clusters (>=0.0.14, <=0.0.15), com.github.sakserv:hadoop-mini-clusters-oozie (>=0.1.1, <=0.1.16) +13 more potentially affected by CVE-2025-26796 via org.apache.oozie:oozie-core (>=4.1.0, <=5.2.1)
org.apache.oozie:oozie-core MAVEN version =4.1.0, =0.0.14, =0.1.1, =1.0, =1.2, =4.2.0, =5.2.0, =4.1.0, =4.2.0, =4.1.0, =4.1.0, =4.1.0, =4.1.0, =5.2.1 - org.kitesdk:kite-data-oozie 1.1.0 Source cves: CVE-2025-26796 Source advisory: SNYK:JAVA-ORGAPACHEOOZIE-9512888...
Linux Distros Unpatched Vulnerability : CVE-2015-4835
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and...
MGASA-2025-0042 Updated java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk & java-latest-openjdk packages fix security vulnerability
A difficult to exploit vulnerability allows unauthenticated attackers with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to Oracle Java SE accessible. This vulnerability can b...
