192261 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-55639
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the parsing of Client Security Data within the Client MCS Connec...
Critical Photon OS Security Update - PHSA-2026-5.0-0916
Updates of 'linux-esx', 'linux' packages of Photon OS have been released...
Security Bulletin: IBM watsonx.data integration has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in IBM watsonx.data integration. Vulnerability Details CVEID:CVE-2026-33814 DESCRIPTION: When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a...
PYSEC-2026-1485 Kedro allows Remote Code Execution by Pulling Micro Packages
In kedro-org/kedro version 0.19.8, the pullpackage API function allows users to download and extract micro packages from the Internet. However, the function projectwheelmetadata within the code path can execute the setup.py file inside the tar file, leading to remote code execution RCE by running...
MAL-2026-7351 Malicious code in private-packages-sharingsession (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7350 Malicious code in private-packages-sharing-sessionz (npm)
--- -= Per source details. Do not edit below this line.=-...
Linux Distros Unpatched Vulnerability : CVE-2026-54433
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, there is Stored Cross-Site Scripting XSS via a crafted plain-text email message. The...
AlmaLinux 8 : libreoffice (ALSA-2026:35839)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:35839 advisory. libreoffice: LibreOffice Calc: Arbitrary code execution via heap buffer overflow in formula compilation CVE-2026-8357 Tenable has extracted the preceding...
CVE-2026-50021
A flaw was found in pnpm, a package manager. An attacker who can modify the pnpm-lock.yaml file and control the package registry can exploit this vulnerability. By removing the integrity field from the lockfile and serving altered package content, the pnpm install --frozen-lockfile command can...
CVE-2026-50016
A flaw was found in pnpm, a package manager. This vulnerability allows a malicious registry package to include specially crafted dependency aliases that contain path traversal segments. During the installation process, pnpm incorrectly processes these aliases, which can lead to the replacement of...
RHSA-2026:35812 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Bulletin has no description...
RHSA-2026:35807 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Bulletin has no description...
MiracleLinux 8 : glibc-2.28-251.el8_10.38 (AXSA:2026-1182:06)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1182:06 advisory. glibc: glibc: Heap Buffer Overflow in scanf with %mc format specifier and large width CVE-2026-5450 Tenable has extracted the preceding description block...
RockyLinux 10 : cifs-utils (RLSA-2026:32990)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:32990 advisory. cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall CVE-2026-12505 Tenable has extracted the preceding description bloc...
Linux Distros Unpatched Vulnerability : CVE-2026-11819
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Module: plugins/modules/keyringinfo.py CVSS 3.1: 5.5 MEDIUM AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N Issue: The module retrieves a passphrase from the OS native...
RockyLinux 10 : coreutils (RLSA-2026:33124)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:33124 advisory. coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification CVE-2025-5278 Tenable has extracted the preceding description block directly from...
[SECURITY] [DSA 6381-1] linux security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6381-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 05, 2026 https://www.debian.org/security/faq -...
MGASA-2026-0235 Updated mariadb packages fix security vulnerabilities
This update to the latest LTS version fixes some severe security vulnerabilities...
North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign
The North Korean threat actors linked to the Contagious Interview campaign have been observed publishing 108 unique packages and web browser extensions spanning npm, Packagist, Go, and Google Chrome as part of an ongoing activity referred to as PolinRider. "The campaign remains active, and new...