196290 matches found
Malicious Package
Overview bubblestr is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
django-freeradius (0.1.0), genalog (>=0.1.0rc4, <=0.1.0) +6 more potentially affected by CVE-2026-49452 via weasyprint (51.0.0)
weasyprint PYPI version 51.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on weasyprint and may be impacted: - django-freeradius 0.1.0 - genalog =0.1.0rc4, =0.1.0, =0.0.8, =3.4.0, =0.0.3, =1.0.0, =1.1.1 Source cves: CVE-2026-49452 Source advisory:...
CVE-2026-50021
A flaw was found in pnpm, a package manager. An attacker who can modify the pnpm-lock.yaml file and control the package registry can exploit this vulnerability. By removing the integrity field from the lockfile and serving altered package content, the pnpm install --frozen-lockfile command can...
CVE-2026-50016
A flaw was found in pnpm, a package manager. This vulnerability allows a malicious registry package to include specially crafted dependency aliases that contain path traversal segments. During the installation process, pnpm incorrectly processes these aliases, which can lead to the replacement of...
RHSA-2026:35812 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Bulletin has no description...
RHSA-2026:35807 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Bulletin has no description...
-react-file-list-components (1.1.1), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +40960 more potentially affected by CVE-2026-14802 via react-dev-utils (>=0.1.1, <=12.1.0-next.26)
react-dev-utils NPM version =0.1.1, =1.0.1, =0.1.0, =0.1.0, =0.1.6 - 0beny1s 1.1.6 - 0scarclassa 1.0.1 - 0scarclassb 1.0.1 - 0scarclassc 1.0.1 - 0scarclassd 1.0.1 - 0scarclasse 1.0.1 - 0scarclassf 1.0.1 - 0scarclassg 1.0.1 - 0scarclassh 1.0.1 - 0scarclassi 1.0.1 and more Source cves: CVE-2026-148...
RockyLinux 10 : cifs-utils (RLSA-2026:32990)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:32990 advisory. cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall CVE-2026-12505 Tenable has extracted the preceding description bloc...
MiracleLinux 8 : glibc-2.28-251.el8_10.38 (AXSA:2026-1182:06)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1182:06 advisory. glibc: glibc: Heap Buffer Overflow in scanf with %mc format specifier and large width CVE-2026-5450 Tenable has extracted the preceding description block...
Linux Distros Unpatched Vulnerability : CVE-2026-11819
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Module: plugins/modules/keyringinfo.py CVSS 3.1: 5.5 MEDIUM AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Issue: The module retrieves a passphrase from the OS native...
RockyLinux 10 : coreutils (RLSA-2026:33124)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:33124 advisory. coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification CVE-2025-5278 Tenable has extracted the preceding description block directly from...
MiracleLinux 9 : bind-9.16.23-40.el9_8.1 (AXSA:2026-1031:06)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1031:06 advisory. bind: Resource exhaustion via malformed DNSKEY handling CVE-2025-8677 Tenable has extracted the preceding description block directly from the MiracleLinux...
[SECURITY] [DSA 6381-1] linux security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6381-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 05, 2026 https://www.debian.org/security/faq -...
Slackware Linux 15.0 / current libseccomp Vulnerability (SSA:2026-183-01)
The version of libseccomp installed on the remote host is prior to 2.6.1. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-183-01 advisory. New libseccomp packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the preceding...
MGASA-2026-0235 Updated mariadb packages fix security vulnerabilities
This update to the latest LTS version fixes some severe security vulnerabilities...
North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign
The North Korean threat actors linked to the Contagious Interview campaign have been observed publishing 108 unique packages and web browser extensions spanning npm, Packagist, Go, and Google Chrome as part of an ongoing activity referred to as PolinRider. "The campaign remains active, and new...
RHSA-2026:35387 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
RHSA-2026:35272 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...