CVE-2026-5867 vulnerabilities

Vulnerabilities for packages: chromium...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: postgresql18: postgresql-18.3-1.2.hum1 aarch64, x8664 postgresql-contrib-18.3-1.2.hum1 aarch64, x8664 postgresql-docs-18.3-1.2.hum1 aarch64, x8664 postgresql-plperl-18.3-1.2.hum1 aarch64, x8664...

WordPress DirectoryPress - Business Directory And Classified Ad Listing plugin <= 3.6.26 - Unauthenticated SQL Injection via 'packages' vulnerability

WordPress DirectoryPress - Business Directory And Classified Ad Listing plugin = 3.6.26 - Unauthenticated SQL Injection via 'packages' vulnerability discovered by Leonid Semenenko lsemenenko in WordPress Plugin DirectoryPress versions = 3.6.26...

CVE-2026-33116 vulnerabilities

Vulnerabilities for packages: dotnet-sdk, promitor, dotnet-bootstrap, dotnet-sdk-stage0, dotnet, powershell...

CVE-2026-26171 vulnerabilities

Vulnerabilities for packages: dotnet-sdk, promitor, dotnet-bootstrap, dotnet-sdk-stage0, dotnet, powershell...

GHSA-W3X6-4M5H-CXQF vulnerabilities

Vulnerabilities for packages: dotnet-sdk, promitor, dotnet-bootstrap, dotnet-sdk-stage0, dotnet, powershell...

GHSA-37GX-XXP4-5RGX vulnerabilities

Vulnerabilities for packages: dotnet-sdk, promitor, dotnet-bootstrap, dotnet-sdk-stage0, dotnet, powershell...

GHSA-G4VJ-CJJJ-V7HG vulnerabilities

Vulnerabilities for packages: dotnet-sdk, dotnet-sdk-stage0, dotnet-bootstrap, dotnet...

GHSA-G4VJ-CJJJ-V7HG vulnerabilities

Vulnerabilities for packages: dotnet, azure-functions-host, dotnet-sdk, dotnet-sdk-stage0, dotnet-bootstrap...

CVE-2026-33116 vulnerabilities

Vulnerabilities for packages: dotnet, dotnet-sdk, promitor, dotnet-sdk-stage0, dotnet-bootstrap, powershell...

GHSA-37GX-XXP4-5RGX vulnerabilities

Vulnerabilities for packages: dotnet, dotnet-sdk, promitor, dotnet-sdk-stage0, dotnet-bootstrap, powershell...

PT-2026-33494

Name of the Vulnerable Software and Affected Versions Anviz CX2 Lite affected versions not specified Anviz CX7 affected versions not specified Description Anviz CX2 Lite and CX7 allow the upload of unverified update packages. The device unpacks and executes a script from these packages, which lea...

Linux Distros Unpatched Vulnerability : CVE-2026-21726

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The CVE-2021-36156 fix validates the namespace parameter for path traversal sequences after a single URL decode, by double encoding, an attacker can read files ...

Critical Photon OS Security Update - PHSA-2026-4.0-0998

Updates of 'linux', 'systemd' packages of Photon OS have been released...

MiracleLinux 8 : bind-9.11.36-16.el8_10.7 (AXSA:2026-451:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-451:02 advisory. bind: BIND: Denial of Service via maliciously crafted DNSSEC-validated zone CVE-2026-1519 Tenable has extracted the preceding description block directly from...

Linux Distros Unpatched Vulnerability : CVE-2026-6068

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NASM contains a heap use after free vulnerability in response file -@ processing where a dangling pointer to freed memory is stored in the global dependfile and...

Oracle Linux 10 : kea (ELSA-2026-7342)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-7342 advisory. 3.0.1-3 - Fixes CVE-2026-3608 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...

Important Photon OS Security Update - PHSA-2026-4.0-0999

Updates of 'linux' packages of Photon OS have been released...

Anviz CX7和Anviz CX2 Lite 安全漏洞

Both Anviz CX7 and Anviz CX2 Lite are products of the American company Anviz. The Anviz CX7 is a smart terminal device integrated with biometric identification and access control functions. The Anviz CX2 Lite is also a smart terminal device that integrates face recognition and access control...

Oracle Linux 9 : nodejs:22 (ELSA-2026-7302)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-7302 advisory. - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163369 Fixes: CVE-2026-152...