171545 matches found
RHEL 9 : kpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_113_1, kpatch-patch-5_14_0-427_126_1, kpatch-patch-5_14_0-427_68_2, and kpatch-patch-5_14_0-427_84_1 (RHSA-2026:62639)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62639 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patc...
Linux Distros Unpatched Vulnerability : CVE-2026-53683
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - resetpassword.html parses query string parameters and uses the 'url' parameter as a redirection target window.location = url after password reset, optionally...
Linux Distros Unpatched Vulnerability : CVE-2026-52131
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llama.cpp b5693 and before has a Reachable Assertion via the ggufreader::read function. CVE-2026-52131 Note that Nessus relies on the presence of the package as...
RHEL 9 : kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, kpatch-patch-5_14_0-284_158_1, and kpatch-patch-5_14_0-284_172_1 (RHSA-2026:62638)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62638 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patc...
Linux Distros Unpatched Vulnerability : CVE-2026-84121
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape due to use-after-free in the DOM: Security component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefo...
Linux Distros Unpatched Vulnerability : CVE-2026-13608
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic...
CVE-2026-84805: Missing Authorization
Kimai versions from 2.61.0 before 2.63.0 fail to disable admin-only work-contract preferences for low-privilege users in the PATCH /api/users/id/preferences endpoint. Although the web interface gates these employment-contract fields behind the contractotherprofile admin permission, the...
RHEL 9 : kpatch-patch-5_14_0-687_10_1 (RHSA-2026:62640)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:62640 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patc...
RHEL 10 : kpatch-patch-6_12_0-211_16_1 (RHSA-2026:62642)
The remote Redhat Enterprise Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:62642 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This pat...
RHEL 8 : kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_125_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 (RHSA-2026:62637)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:62637 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This patch module ...
CVE-2026-84479 WWBN AVideo Authentication Bypass via User-Agent Header
WWBN AVideo current e01e41ecc and earlier makes three login-time security controls depend solely on the client-supplied User-Agent header. The isAVideoEncoder/isAVideoMobileApp checks match HTTPUSERAGENT against a hardcoded literal "AVideoEncoder"/"AVideoMobileApp" with no IP check or shared...
ROOT-OS-DEBIAN-13-CVE-2026-52584 CVE-2026-52584 in jpeg-xl - Patched by Root
Root has patched CVE-2026-52584 in the jpeg-xl package for Root:Debian:13. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-44728 CVE-2026-44728 in @babel/plugin-transform-modules-systemjs - Patched by Root
Root has patched CVE-2026-44728 in the @babel/plugin-transform-modules-systemjs package for Root:npm. Multiple fixed versions available...
CLSA-2026-1788264598 TuxCare security update for koa (1 CVE)
TuxCare rebuilt koa to address 1 CVE. Fixed in 1.7.1-tuxcare.3...
CLEANSTART-2026-DC01950 Security fixes in gradle 8.14.5-r1
Package gradle version 8.14.5-r1 fixes 3 vulnerabilities: CVE-2026-54512, CVE-2026-54513, ghsa-r7wm-3cxj-wff9...
CLEANSTART-2026-GO78201 Security fixes in tkn 0.45.0-r1
Package tkn version 0.45.0-r1 fixes 42 vulnerabilities: CVE-2026-33818, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860...
CLEANSTART-2026-QY94875 Security fixes in rekor-backfill-index 1.4.3-r0
Package rekor-backfill-index version 1.4.3-r0 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x...
CLEANSTART-2026-QO69280 Security fixes in tempo 2.9.5-r1
Package tempo version 2.9.5-r1 fixes 2 vulnerabilities: CVE-2026-46600, ghsa-259r-337f-4rfw...
CLEANSTART-2026-GB68607 Security fixes in langfuse 3.225.0-r1
Package langfuse version 3.225.0-r1 fixes 7 vulnerabilities: CVE-2026-18446, CVE-2026-69207, CVE-2026-13697, CVE-2026-14643, CVE-2026-15157...