256209 matches found
Rocky Linux 8 [CIQ] Security Update: jss / jss-debuginfo / jss-debugsource / jss-javadoc / ldapjdk / etc (crlsa-2021_2235)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20212235 advisory. pki-server: Dogtag installer pkispawn logs admin credentials into a world-readable log file CVE-2021-3551 The PKI installer pkispawn logs admin credentials into a...
CentOS Linux 6 [TuxCare] Security Update: squid Multiple Vulnerabilities (CENTOS6:CLSA-2026:1777446517)
The CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1777446517 advisory. - An issue was discovered in Squid through 4.7. When Squid is parsing ESI, it keeps the ESI elements in ESIContext. ESIContext contains ...
Linux Distros Unpatched Vulnerability : CVE-2026-47503
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager vGPU plugin, where a guest VM user may cause an out-of-bounds write by...
Rocky Linux 8.6 [CIQ] Security Update: dnf-plugin-subscription-manager / etc (ciqsa-2026_0033)
The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260033 advisory. This advisory aggregates security fixes for the subscription-manager SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2023-3899. Tenable has extracted the preceding...
Linux Distros Unpatched Vulnerability : CVE-2026-102904
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.0.0 until 4.5....
Rocky Linux 10.2 [CIQ] Security Update: yggdrasil-worker-package-manager / etc Multiple Vulnerabilities (crlsa-2026_69099)
The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202669099 advisory. net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution CVE-2026-56860 encoding/xml: golang: Go: Denial of...
Debian dla-4808 : network-manager-l2tp - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4808 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4808-1 [email protected]...
PT-2026-103764
A chained CSRF and unrestricted SVG file upload vulnerability in the File Manager module allows stored Cross-Site Scripting, enabling session cookie exfiltration and administrator account takeover. This issue affects Pandora FMS: from 777 onwards...
PT-2026-103767
Incomplete extension blacklist in the File Manager module allows authenticated upload and execution of arbitrary .phar files. Affects Pandora FMS from 777 onwards...
CVE-2026-64947: Unrestricted Upload of File with Dangerous Type
A chained CSRF bypass and unrestricted file upload vulnerability in the Plugin File Manager allows an attacker to upload and execute arbitrary PHP code, resulting in Remote Code Execution. This issue affects Pandora FMS: from 777 onwards...
AlmaLinux 9.2 [TuxCare] Security Update: squid (ALMALINUX9.2:CLSA-2026:1778252773)
The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778252773 advisory. - An issue was discovered in Squid 4.9 through 4.17 and 5.0.6 through 5.6. Due to inconsistent handling of internal URIs, there can be Exposu...
PT-2026-103883
Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master who can read files under BOKS tmp may be able to obtain CA secret or host private-key...
The vulnerability of the application software interface of the Cisco Catalyst SD-WAN Manager allows a perpetrator to bypass existing security mechanisms and gain unauthorized access to protected information.
The vulnerability of the application software interface of the Cisco Catalyst SD-WAN Manager is related to improper handling of data with encoded URLs. Exploiting this vulnerability allows an attacker to bypass existing security mechanisms and gain unauthorized access to protected information by...
PT-2026-103768
Missing input validation and output encoding on the directory name parameter in File Manager's Create Directory allows stored XSS, executing without user interaction. Affects Pandora FMS from 777 onwards...
CVE-2026-102122
Kiteworks did not correctly enforce which roles a shared folder's manager was permitted to assign. In a default configuration, an authenticated user holding the Manager role on a folder could grant the Owner role to themselves or to other members of that folder...
CVE-2026-102122
The Kiteworks Core platform contains an incorrect authorization vulnerability where the system fails to properly restrict role assignments for shared folders. In a default configuration, an authenticated user with the Manager role can escalate their privileges by granting themselves or other fold...
CVE-2026-102122 Kiteworks Core Incorrect Authorization
Kiteworks did not correctly enforce which roles a shared folder's manager was permitted to assign. In a default configuration, an authenticated user holding the Manager role on a folder could grant the Owner role to themselves or to other members of that folder...
CVE-2026-102122 Kiteworks Core Incorrect Authorization
Kiteworks did not correctly enforce which roles a shared folder's manager was permitted to assign. In a default configuration, an authenticated user holding the Manager role on a folder could grant the Owner role to themselves or to other members of that folder...
EUVD-2026-90296
Kiteworks did not correctly enforce which roles a shared folder's manager was permitted to assign. In a default configuration, an authenticated user holding the Manager role on a folder could grant the Owner role to themselves or to other members of that folder...
