The vulnerability of Cisco IOS XE operating systems, related to insufficient control over resources during their existence, allows attackers to compromise the accessibility of protected information.

The vulnerability of Cisco IOS XE operating systems is related to insufficient control over resources during their existence. Exploiting this vulnerability can allow a malicious actor to compromise the accessibility of protected information...

The vulnerability of Cisco IOS XE operating systems, related to operations beyond the buffer in memory, allows attackers to compromise the accessibility of protected information.

The vulnerability of Cisco IOS XE operating systems is related to operations that occur outside of the buffer in memory. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of protected information...

The vulnerability of Cisco IOS XE operating systems, related to insufficient validation of input data, allows attackers to compromise the accessibility of protected information.

The vulnerability of Cisco IOS XE operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the accessibility of protected information...

The vulnerability of the Extensible Messaging Client Protocol (XMCP) in Cisco IOS and Cisco IOS XE operating systems allows a perpetrator to induce a service failure.

The vulnerability of the Extensible Messaging Client Protocol XMCP in Cisco IOS and Cisco IOS XE operating systems lies in the lack of input validation for cyclic operations. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Photon OS 5.0: Python3 PHSA-2026-5.0-92-0945

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0945. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Acl PHSA-2026-5.0-92-0946

An update of the acl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0946. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2026-15733 WGDashboard Remote Code Execution vulnerability

A Remote Code Execution RCE vulnerability exist in WGDashboard version 4.2.3 and earlier. Multiple OS command injection allows authenticated attackers to execute arbitrary commands as root...

ROOT-OS-ALPINE-323-CVE-2026-11824 CVE-2026-11824 in sqlite - Patched by Root

Root has patched CVE-2026-11824 in the sqlite package for Root:Alpine:3.23. Multiple fixed versions available...

Critical Photon OS Security Update - PHSA-2026-5.0-92-0946

Updates of 'libvirt', 'libxml2', 'runc', 'acl', 'perl' packages of Photon OS have been released...

The vulnerability of the __sbi_store() and f2fs_sbi_show() functions in the fs/f2fs/sysfs.c file of the F2FS file system driver for the Linux operating system allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the sbistore and f2fssbishow functions in the fs/f2fs/sysfs.c file of the F2FS file system in the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to gain unauthorized acce...

The vulnerability of the parse_audio_unit() function in the sound/usb/mixer.c module exposes the security of USB audio devices supported by the Linux operating system, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the parseaudiounit function in the sound/usb/mixer.c module, which supports USB audio devices in Linux operating systems, is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

OS Command injection

Impact PHPCodeSniffer versions before v3.13.6 and v4.0.2 contain a command injection vulnerability in the code creating the Gitblame, Hgblame and Svnblame reports. As a result, running PHPCodeSniffer over untrusted files, for example, in a CI pipeline that scans pull requests, or on a developer...

GHSA-X52F-23V9-FG5G vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-7FP3-MXP6-94W2 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-17762 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-XGPF-25JC-XVGF vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-PRC5-PGX6-37J6 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-F342-MCRF-WV9H vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-17985 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-66297 Unescaped deployment environment variables in generated setup commands

Improper Neutralization of Special Elements used in an OS Command OS Command Injection vulnerability in livebook-dev livebook allows command injection into generated deployment setup commands. LivebookWeb.Hub.Teams.DeploymentGroupAgentComponent.dockerinstructions/2 and...