Rocky Linux 9.4 [CIQ] Security Update: nginx / nginx-all-modules / nginx-core / nginx-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_0555)

The Rocky Linux 9.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260555 advisory. This advisory aggregates security fixes for the nginx SRPM in CIQ LTS 9.4. It addresses 3 CVEs: CVE-2022-41741, CVE-2022-41742, CVE-2024-7347. Tenable ha...

Rocky Linux 8 [CIQ] Security Update: nginx / nginx-all-modules / nginx-debuginfo / nginx-debugsource / etc Multiple Vulnerabilities (crlsa-2026_6907)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20266907 advisory. nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files CVE-2026-32647 NGINX: NGINX: Denial of Service or file modification via...

AlmaLinux 9.2 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-core / nginx-filesystem / etc (ALMALINUX9.2:CLSA-2025:1752516250)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1752516250 advisory. - When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client...

AlmaLinux 9.2 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-core / nginx-filesystem / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1753207126)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1753207126 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

Rocky Linux 9.2 [CIQ] Security Update: nginx / nginx-all-modules / nginx-core / nginx-filesystem / etc Multiple Vulnerabilities (ciqsa-2026_1563)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261563 advisory. This advisory aggregates security fixes for the nginx SRPM in CIQ LTS 9.2. It addresses 4 CVEs: CVE-2025-23419, CVE-2026-60005, CVE-2024-7347,...

Rocky Linux 9.2 [CIQ] Security Update: nginx / nginx-all-modules / nginx-core / nginx-core-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_1453)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261453 advisory. This advisory aggregates security fixes for the nginx SRPM in CIQ LTS 9.2. It addresses 5 CVEs: CVE-2026-27651, CVE-2026-27784, CVE-2026-1642,...

Rocky Linux 10.1 [CIQ] Security Update: python3-pyasn1 / python3-pyasn1-modules (crlsa-2026_3354)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20263354 advisory. pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID CVE-2026-23490 Tenable has extracted the preceding description block...

Rocky Linux 9.6 [CIQ] Security Update: nginx / nginx-all-modules / nginx-core / nginx-core-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_1452)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261452 advisory. This advisory aggregates security fixes for the nginx SRPM in CIQ LTS 9.6. It addresses 5 CVEs: CVE-2026-27651, CVE-2026-27784, CVE-2026-1642,...

Rocky Linux 8.6 [CIQ] Security Update: nginx / nginx-all-modules / nginx-debuginfo / nginx-debugsource / etc (ciqsa-2026_0999)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260999 advisory. This advisory aggregates security fixes for the nginx SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2023-44487. Tenable has extracted the preceding description blo...

Rocky Linux 8.6 [CIQ] Security Update: varnish-modules / varnish-modules-debuginfo / etc (ciqsa-2026_0274)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260274 advisory. This advisory aggregates security fixes for the varnish-modules SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2023-44487. Tenable has extracted the preceding...

Rocky Linux 9.6 [CIQ] Security Update: nginx / nginx-all-modules / nginx-core / nginx-core-debuginfo / etc Multiple Vulnerabilities (ciqsa-2026_1381)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261381 advisory. This advisory aggregates security fixes for the nginx SRPM in CIQ LTS 9.6. It addresses 18 CVEs: CVE-2016-0742, CVE-2018-16845, CVE-2021-3618,...

CVE-2026-102384

Author Cross Site Scripting XSS in Supreme Modules Lite = 2.5.63 versions...

@queenanya/invite (>=1.0.0, <=5.0.0), @queenanya/modules (>=5.0.1-0, <=6.1.0) potentially affected by unknown CVE via @queenanya/baileys (9.10.1)

@queenanya/baileys NPM version 9.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on @queenanya/baileys and may be impacted: - @queenanya/invite =1.0.0, =5.0.1-0, =6.1.0 Source cves: unknown CVE Source advisory: GHSA-W659-C49M-62P4...

CVE-2026-102384 WordPress Supreme Modules Lite plugin <= 2.5.63 - Cross Site Scripting (XSS) vulnerability

Author Cross Site Scripting XSS in Supreme Modules Lite = 2.5.63 versions...

EUVD-2026-89940

Author Cross Site Scripting XSS in Supreme Modules Lite = 2.5.63 versions...

CVE-2026-102384

The WordPress Supreme Modules Lite plugin in versions

WordPress Supreme Modules Lite plugin <= 2.5.63 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Supreme Modules Lite versions = 2.5.63...

CVE-2026-103113

A vulnerability was determined in OS4ED openSIS-Classic up to 9.3. The affected element is the function save action of the file modules/students/Student.php of the component General Information Tab. Executing a manipulation of the argument students can lead to sql injection. The attack may be...

CVE-2026-103113

The OS4ED openSIS-Classic software (up to version 9.3 ) is vulnerable to SQL injection in the General Information Tab component. The flaw exists within the save action function of the modules/students/Student.php file. An attacker can exploit this by manipulating the students argument, which may ...

EUVD-2026-89762

A vulnerability was determined in OS4ED openSIS-Classic up to 9.3. The affected element is the function save action of the file modules/students/Student.php of the component General Information Tab. Executing a manipulation of the argument students can lead to sql injection. The attack may be...