612409 matches found
RockyLinux 8 : perl-IO-Compress (RLSA-2026:30858)
The remote RockyLinux 8 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:30858 advisory. perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob CVE-2026-48962 Tenable has extracted the preceding description...
PT-2026-65698
An unrestricted SCORM file upload vulnerability in Koollab LMS allowed an authenticated module designer to upload a SCORM package containing a PHP webshell to a publicly accessible directory and execute arbitrary code on the server...
NewStart CGSL MAIN 6.06 : bluez Vulnerability (NS-SA-2026-0059)
The remote NewStart CGSL host, running version MAIN 6.06, has bluez packages installed that are affected by a vulnerability: - Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports,...
Linux Distros Unpatched Vulnerability : CVE-2026-62436
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. With the introduction of Grant...
MAL-2026-11499 Malicious code in @types-beta/sdk (npm)
The npm package @types-beta/sdk is a supply-chain dropper that impersonates the trusted @types DefinitelyTyped namespace to look like a routine type-definition dependency. It bundles a Windows executable vendor/nanocache.exe and launches it as an import-time side effect: dist/index.js calls init ...
Linux Distros Unpatched Vulnerability : CVE-2026-61547
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - librabbitmq - None Ubuntu Linux - Unknown description CVE-2026-61547 Note that Nessus relies on the presence of the package as reported by the...
Fedora 44 : kronosnet (2026-db53330c8f)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-db53330c8f advisory. CVE-2026-15811 LOW: encryption key exposure in memory after cryptographic configuration changes. Wipe cryptographic keys with explicitbzero before...
PT-2026-66661
These are all security issues fixed in the libxmlrpc++9-1.64.03-2.1 package on the GA media of openSUSE Tumbleweed...
Malicious code in @types-beta/sdk (npm)
The npm package @types-beta/sdk is a supply-chain dropper that impersonates the trusted @types DefinitelyTyped namespace to look like a routine type-definition dependency. It bundles a Windows executable vendor/nanocache.exe and launches it as an import-time side effect: dist/index.js calls init ...
Critical Photon OS Security Update - PHSA-2026-5.0-0933
Updates of 'gawk' packages of Photon OS have been released...
TencentOS Server 4: nodejs-nodemon (TSSA-2026:0762)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0762 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
Linux Distros Unpatched Vulnerability : CVE-2026-6879
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Element.findall and fully-consumed Element.iterfind exhibit On^2 time complexity when using XPath index predicates e.g. 1, last, last-N on XML documents with ma...
RockyLinux 8 : python-urllib3 (RLSA-2026:36732)
The remote RockyLinux 8 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:36732 advisory. urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers CVE-2026-44431 Tenable has extracted the preceding description...
Critical: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana12.4: grafana12.4-12.4.6-0.2.hum1 aarch64, x8664 grafana12.4-12.4.6-0.2.hum1.src src...
@aios-alpha/design (>=0.2.1, <=0.3.0), @aiosbrain/aios (>=0.9.1, <=0.10.0) +143 more potentially affected by CVE-2026-54639 via style-dictionary (>=4.3.0, <=5.4.0)
style-dictionary NPM version =4.3.0, =0.2.1, =0.9.1, =0.2.0, =1.0.0, =1.0.0, =0.1.2, =0.1.1, =0.0.12-beta.1, =0.0.229 - @bu-da/ai-context 0.1.2 - @bu-da/component-specs 0.1.2 - @bu-da/mcp-server 0.1.2 - @bu-da/react-native 0.1.2 and more Source cves: CVE-2026-54639 Source advisory:...
MAL-2026-11161 Malicious code in @joyfill/layouts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2f0675d4a2717361ec79b2c5a5cbf0ff0367e8d9cbf991f2f300df6c6b819ec Analysis of @joyfill/[email protected] surfaced no a static rule matches and no traced code paths indicating exfiltration, install-time remot...
Malicious code in @joyfill/layouts (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b2f0675d4a2717361ec79b2c5a5cbf0ff0367e8d9cbf991f2f300df6c6b819ec Analysis of @joyfill/[email protected] surfaced no a static rule matches and no traced code paths indicating exfiltration, install-time remot...
Malicious code in @joyfill/components (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90bed9c7a2d887bec8559ce5eb8d86d3af53b17bfcc685a0469c2f1727979f78 No a static rule matches and no traced behavioral findings were produced for @joyfill/[email protected]. The package artifact does no...
MAL-2026-11160 Malicious code in @joyfill/components (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90bed9c7a2d887bec8559ce5eb8d86d3af53b17bfcc685a0469c2f1727979f78 No a static rule matches and no traced behavioral findings were produced for @joyfill/[email protected]. The package artifact does no...
