196290 matches found
RLSA-2026:37137 Important: tomcat security, bug fix, and enhancement update
Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages JSP technologies. Security Fixes: Apache Tomcat: Apache Tomcat: Information disclosure via Padding Oracle vulnerability in EncryptInterceptor CVE-2026-29146 Apache Tomcat: Apache Tomcat: Missing Encryption of Sensitive...
SUSE CVE-2026-47828
During bosh create-env and bosh delete-env, the CLI uploads compiled CPI packages and rendered job templates to the new VM's DAV blobstore over HTTPS without verifying the server certificate, even though a CA certificate for that endpoint is available in the installation manifest. A network...
Malicious Package
Overview robomerge is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious Package
Overview nodemon-patch is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MiracleLinux 8 : libtasn1-4.13-6.el8_10 (AXSA:2026-1237:02)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1237:02 advisory. libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1expendoctetstring CVE-2025-13151 Tenable has extracted the preceding description...
Linux Distros Unpatched Vulnerability : CVE-2026-50810
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference in smoothparsestreamindex in src/mediatools/mpd.c in GPAC master HEAD before commit b35c61f104b85fbb16520ac2838d5d2ef70845b5 allows...
Oracle Linux 8 : gstreamer1-plugins-bad-free (ELSA-2026-37130)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-37130 advisory. - Fix for CVE-2026-52720: librfb framebuffer update rectangle validation Resolves: RHEL-184455 Tenable has extracted the preceding description block...
Critical Photon OS Security Update - PHSA-2026-5.0-90-0921
Updates of 'keepalived' packages of Photon OS have been released...
MiracleLinux 8 : container-tools:rhel8 (AXSA:2026-1242:01)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1242:01 advisory. net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE:...
CVE-2026-49213: Server-Side Request Forgery (SSRF)
TypeBot is a chatbot builder tool. Prior to 3.17.2, Typebot's shared SSRF validator in packages/lib/src/ssrf/validateHttpReqUrl.ts can be bypassed with the IPv6 unspecified address :: because validateIPAddress blocks local, metadata, and private ranges but does not block :: or its expanded form. ...
CVE-2026-54714: Improper Neutralization of Input During Web Page Generation
Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.41.0, @logto/core reflected the SAML RelayState, SAMLResponse, and actionUrl into a Logto-origin auto-submit HTML form in packages/core/src/saml-application/SamlApplication/utils.ts without HTML-attribute...
Linux Distros Unpatched Vulnerability : CVE-2026-12590
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Impact: In body-parser versions prior to 1.20.6 1.x line and 2.3.0 2.x line, when the parser is configured with an invalid limit option value such as an...
GHSA-86VM-VP8G-7929 vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-gcp, linux-azure, linux-qemu...
CVE-2026-53240 vulnerabilities
Vulnerabilities for packages: linux-qemu-melange, linux-gcp, linux-azure, linux-qemu...
GHSA-CH76-V6W4-9WX9 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-J3WX-VG3Q-5R45 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-14392 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-14064 vulnerabilities
Vulnerabilities for packages: chromium...