629290 matches found
Microsoft Azure Entra ID Compatibility Package Privilege Bypass
The vulnerability of the compatibility package for Microsoft Azure Entra ID involves bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...
Linux Distros Unpatched Vulnerability : CVE-2026-81830
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via...
Oracle Linux 10 : ELSA-2026-64777-0: / buildah (ELSA-2026-647770)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-647770 advisory. 1.43.1-6.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.43.1-6 - Rebuild for golang CVE fixes - Resolves:...
Oracle Linux 9 : ELSA-2026-64774-0: / python3.14-cryptography (ELSA-2026-647740)
The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-647740 advisory. 45.0.4-6 - Fix gating plan 45.0.4-5 - Security fixes for CVE-2026-69248 and CVE-2026-69249 Tenable has extracted the preceding description block...
Oracle Linux 9 : ELSA-2026-65120-0: / redis:7 (ELSA-2026-651200)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-651200 advisory. 7.2.16-1.0.1 - Build with 64k pages to support redis on UEK on aarch64 7.2.16-1 - rebase to 7.2.16 for CVE-2026-66373 and backport CVE-2026-72568...
MAL-2026-16058 Malicious code in vinzz-wcli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dec0212466f7170f1e00ecbfe3f846cbf5d211917c3831a6ee162ca6d44ec10 vinzz-wcli is a WhatsApp CLI whose main entry index.js sets global.ownerr = "[email protected]" and treats any incoming WhatsApp message...
Malicious code in toru-ultimate (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ef8cb6f3ca866b67fa91f2e770c674ddb7d6b110fd671ba98669dc1220510f The package's loginViaAPI function POSTs caller-supplied Facebook email, password, and 2FA Base32 secret to...
MAL-2026-16057 Malicious code in toru-ultimate (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e6ef8cb6f3ca866b67fa91f2e770c674ddb7d6b110fd671ba98669dc1220510f The package's loginViaAPI function POSTs caller-supplied Facebook email, password, and 2FA Base32 secret to...
MAL-2026-16056 Malicious code in tailwind-aspect-styles (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d63fe1e50dc7d704732a5e92e95f320fcc3fac45c5a0a223ed278f316c2bb14 The package's main module src/index.js performs an https.get to http://23.27.245.100/index.js over plain HTTP, writes the response to./inout.js in th...
CVE-2026-85508 affecting package freeipmi for versions less than 1.6.19-1
CVE-2026-85508 affecting package freeipmi for versions less than 1.6.19-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-74994 affecting package erlang for versions less than 26.2.5.21-6
CVE-2026-74994 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...
CVE-2026-73812 affecting package erlang for versions less than 26.2.5.21-6
CVE-2026-73812 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...
CVE-2026-73276 affecting package erlang for versions less than 26.2.5.21-6
CVE-2026-73276 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...
CVE-2026-66357 affecting package erlang for versions less than 26.2.5.21-6
CVE-2026-66357 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...
CVE-2026-85507 affecting package freeipmi for versions less than 1.6.19-1
CVE-2026-85507 affecting package freeipmi for versions less than 1.6.19-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-85506 affecting package freeipmi for versions less than 1.6.19-1
CVE-2026-85506 affecting package freeipmi for versions less than 1.6.19-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-85504 affecting package freeipmi for versions less than 1.6.19-1
CVE-2026-85504 affecting package freeipmi for versions less than 1.6.19-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-71562 affecting package erlang for versions less than 26.2.5.21-6
CVE-2026-71562 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...