CVE-2025-55130 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2016-1906 vulnerabilities

Vulnerabilities for packages: kubernetes...

GHSA-7JQF-V358-P8G7 vulnerabilities

Vulnerabilities for packages: tomcat...

GHSA-CR35-G722-63Q3 vulnerabilities

Vulnerabilities for packages: linux-gcp, linux-azure, linux-vmware, linux-qemu, linux-aws...

ch.iterial.keycloak.plugins:keycloak-directus-plugin (>=0.1.0, <=0.7.0), com.c4-soft.springaddons:keycloak-grants-mapper (>=3.1.13-jdk1.8, <=3.1.14-jdk17) +231 more potentially affected by CVE-2026-1518 via org.keycloak:keycloak-services (>=1.0-alpha-1, <=26.7.1)

org.keycloak:keycloak-services MAVEN version =1.0-alpha-1, =0.1.0, =3.1.13-jdk1.8, =11.0.1, =1.2.6, =1.2.5, =0.1, =0.1, =1.0.1, =0.1, =1.0.1, =0.1, =1.2.0, =24.3.0.0, =24.3.0.0, =26.7.3.0 and more Source cves: CVE-2026-1518 Source advisory: SNYK:JAVA-ORGKEYCLOAK-15170836...

Security Bulletin: The IBM Maximo Application Suite AI-Service component uses multiple third-party dependencies that contain vulnerabilities associated with multiple CVEs.

Summary The IBM Maximo Application Suite AI-Service component uses"fonttools-4.44.3-cp311-cp311-manylinux217x8664.manylinux2014x8664.whl, fonttools-4.55.3-cp311-cp311-manylinux217x8664.manylinux2014x8664.whl, werkzeug-3.0.6-py3-none-any.whl, filelock-3.13.4-py3-none-any.whl,...

Fedora: Security Advisory (FEDORA-2026-ce64e86fd8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2024-22029

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insecure permissions in the packaging of tomcat allow local users that win a race during package installation to escalate to root CVE-2024-22029 Note that Nessu...

Linux Distros Unpatched Vulnerability : CVE-2026-1703

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When pip is installing and extracting a maliciously crafted wheel archive, files may be extracted outside the installation directory. The path traversal is...

Debian: Security Advisory (DSA-6117-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7990-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

AlmaLinux 8 : python3 (ALSA-2026:1631)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:1631 advisory. cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service CVE-2025-12084 Tenable has extracted the preceding description block...

GHSA-G9Q4-QJX4-2V7Q vulnerabilities

Vulnerabilities for packages: node-feature-discovery-fips, consul-k8s-fips, minio, prometheus, gpu-operator-fips, dask-gateway, opentofu, flux-source-controller-fips, kuma, helm-operator-fips, terraform-fips, consul, headlamp, beats, google-osconfig-agent, gitlab-rails-ce, chaos-mesh-fips,...

CVE-2026-1699

In the Eclipse Theia Website repository, the GitHub Actions workflow .github/workflows/preview.yml used pullrequesttarget trigger while checking out and executing untrusted pull request code. This allowed any GitHub user to execute arbitrary code in the repository's CI environment with access to...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: vault-benchmark, kratos, spegel, src-fingerprint, golangci-lint, metacontroller, spire-controller-manager, helm-set-status, spire-server, wuzz, pguser, postgres-operator, kor, crossplane-provider-aws-cloudwatchlogs, kubelet-csr-approver, kubernetes-csi-livenessprobe,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: vault-benchmark, kratos, spegel, src-fingerprint, golangci-lint, metacontroller, spire-controller-manager, helm-set-status, spire-server, wuzz, pguser, postgres-operator, kor, crossplane-provider-aws-cloudwatchlogs, kubelet-csr-approver, falco-no-driver,...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, node-feature-discovery-fips, request-1279-14, vault-csi-provider-fips, ip-masq-agent, kubernetes-secret-generator, kbld, newrelic-infra-operator, grpcurl-fips, kuma, clickhouse-operator-fips, gcp-compute-persistent-disk-csi-driver-fip...

Linux Distros Unpatched Vulnerability : CVE-2026-23017

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - idpf: fix error handling in the inittask on load If the inittask fails during a driver load, we end up without vports and netdevs, effectively failing the entir...

RockyLinux 8 : gimp:2.8 (RLSA-2026:1574)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:1574 advisory. gimp: GIMP: Remote Code Execution via PNM file parsing integer overflow CVE-2025-14422 Tenable has extracted the preceding description block directly from the...

Linux Distros Unpatched Vulnerability : CVE-2026-23018

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: release path before initializing extent tree in btrfsreadlockedinode In btrfsreadlockedinode we are calling btrfsinitfileextenttree while holding a path...