193436 matches found
MiracleLinux 8 : git-2.43.5-3.el8_10 (AXSA:2025-9978:03)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9978:03 advisory. git: The sideband payload is passed unfiltered to the terminal in git CVE-2024-52005 Tenable has extracted the preceding description block directly from the...
MiracleLinux 9 : python-requests-2.25.1-9.el9 (AXSA:2025-10115:02)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10115:02 advisory. requests: subsequent requests to the same host ignore cert verification CVE-2024-35195 Tenable has extracted the preceding description block directly from t...
MiracleLinux 9 : emacs-27.2-11.el9_5.2 (AXSA:2025-9922:03)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9922:03 advisory. emacs: arbitrary code execution via Lisp macro expansion CVE-2024-53920 Tenable has extracted the preceding description block directly from the MiracleLinux...
MiracleLinux 9 : libxslt-1.1.34-9.el9_5.2 (AXSA:2025-9864:04)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9864:04 advisory. libxslt: Use-After-Free in libxslt xsltGetInheritedNsList CVE-2024-55549 Tenable has extracted the preceding description block directly from the MiracleLinux...
n8n Supply Chain Attack Abuses Community Nodes to Steal OAuth Tokens
Threat actors have been observed uploading a set of eight packages on the npm registry that masqueraded as integrations targeting the n8n workflow automation platform to steal developers' OAuth credentials. One such package, named "n8n-nodes-hfgjf-irtuinvcm-lasdqewriit," mimics a Google Ads...
Linux Distros Unpatched Vulnerability : CVE-2026-22251
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wlc is a Weblate command-line client using Weblate's REST API. Prior to 1.17.0, wlc supported providing unscoped API keys in the setting. This practice was...
Important Photon OS Security Update - PHSA-2026-5.0-91-0735
Updates of 'linux', 'linux-esx' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2026-5.0-0735
Updates of 'linux-esx', 'linux' packages of Photon OS have been released...
Mageia: Security Advisory (MGASA-2026-0006)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-3220 vulnerabilities
Vulnerabilities for packages: python...
GHSA-74P9-4V44-WWX5 vulnerabilities
Vulnerabilities for packages: python...
GHSA-74P9-4V44-WWX5 vulnerabilities
Vulnerabilities for packages: python...
CVE-2024-3220 vulnerabilities
Vulnerabilities for packages: python...
Linux Distros Unpatched Vulnerability : CVE-2026-22610
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.18,...
CHASE: LLM Agents for Dissecting Malicious PyPI Packages
Modern software package registries like PyPI have become critical infrastructure for software development, but are increasingly exploited by threat actors distributing malicious packages with sophisticated multi-stage attack chains. While Large Language Models LLMs offer promising capabilities fo...
MGASA-2026-0004 Updated sodium packages fix security vulnerability
Libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to cryptocoreed25519isvalidpoint, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren't in the main cryptographic group. CVE-2025-69277...
CVE-2021-3864 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-qemu-melange, linux-qemu...
GHSA-9682-F2FR-3H46 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-qemu-melange, linux-qemu...
PT-2026-2220
Name of the Vulnerable Software and Affected Versions OpenProject versions prior to 16.6.4 Description OpenProject is a web-based project management software. A Local File Read issue exists in the work package PDF export functionality. By uploading a specially crafted SVG file disguised as a PNG ...