CVE-2026-23528

Dask distributed is a distributed task scheduler for Dask. Prior to 2026.1.0, when Jupyter Lab, jupyter-server-proxy, and Dask distributed are all run together, it is possible to craft a URL which will result in code being executed by Jupyter due to a cross-side-scripting XSS bug in the Dask...

CVE-2024-44210

This issue was addressed with improved permissions checking. This issue is fixed in macOS Sequoia 15.1. An app may be able to access user-sensitive data...

CLEANSTART-2025-CN65903 Security fixes for GHSA-6v2p-p543-phr9, GHSA-qxp5-gwg8-xv66, GHSA-vvgc-356p-c3xw applied in versions: 1.5.0-r0, 1.7.0-r0

Multiple security vulnerabilities affect the vault-k8s-fips package. These issues are resolved in later releases. See references for individual GHSA details...

MiracleLinux 4 : file-5.04-30.AXS4 (AXSA:2016-325:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2016-325:01 advisory. The file command is used to identify a particular file according to the type of data contained by the file. File can identify many different file...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004001)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004001 advisory. A use after free in the Linux kernel infiniband hfi1 driver in versions prior to 5.10-rc6 was found in the way user calls Ioctl after open dev file and fork. A local...

MiracleLinux 4 : samba4-4.2.10-9.AXS4 (AXSA:2017-1372:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1372:01 advisory. Samba is the standard Windows interoperability suite of programs for Linux and Unix. Security issues fixed with this release: CVE-2016-2125 RESERVED...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001191)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001191 advisory. Off-by-one error in the pipeadvance function in lib/ioviter.c in the Linux kernel before 4.9.5 allows local users to obtain sensitive information from uninitialized...

MiracleLinux 7 : java-11-openjdk-11.0.1.13-3.el7 (AXSA:2019-3622:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2019-3622:01 advisory. OpenJDK: Improper field access checks Hotspot, 8199226 CVE-2018-3169 OpenJDK: Unrestricted access to scripting engine Scripting, 8202936 CVE-2018-31...

MiracleLinux 4 : nss-3.28.4-3.AXS4 (AXSA:2017-1683:01)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2017-1683:01 advisory. Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000725)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000725 advisory. Race condition in the ip4datagramreleasecb function in net/ipv4/datagram.c in the Linux kernel before 3.15.2 allows local users to gain privileges or cause a denial ...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003988)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003988 advisory. In binderreleasework of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with no...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004122)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004122 advisory. In binderthreadrelease of binder.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional...

Oracle Linux 8 : libpq (ELSA-2026-0695)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-0695 advisory. 13.23-1 - Rebase to upstream release 13.23 - Resolves: RHEL-131269 CVE-2025-12818 Tenable has extracted the preceding description block directly from the Oracle...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004303)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004303 advisory. In binderreleasework of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with no...

MiracleLinux 4 : bind-9.8.2-0.62.4.0.1.rc1.AXS4 (AXSA:2017-1731:05)

"The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1731:05 advisory. BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves...

MiracleLinux 4 : java-1.8.0-openjdk-1.8.0.121-0.b13.AXS4 (AXSA:2017-1272:02)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-1272:02 advisory. The OpenJDK runtime environment. Security issues fixed with this release: CVE-2016-5546 RESERVED This candidate has been reserved by an organization...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001622)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001622 advisory. In the Linux kernel through 4.14.13, drivers/block/loop.c mishandles lorelease serialization, which allows attackers to cause a denial of service lockacquire...

MiracleLinux 4 : thunderbird-45.8.0-1.AXS4 (AXSA:2017-1344:02)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2017-1344:02 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security issues fixed with this release: CVE-2017-5398 RESERVED This candidate has be...

firefox security update

140.7.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 140.7.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 140.7.0-1 - Update to 140.7.0 ESR...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003958)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003958 advisory. drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel before 5.16.12 has a double free related to rtrscltdevrelease. Tenable has extracted the preceding...