Microsoft SQL Server Access Control Vulnerability

Microsoft SQL Server is a large commercial database system from Microsoft Corporation that is used on Microsoft Windows systems. An access control error vulnerability exists in Microsoft SQL Server. An attacker could exploit the vulnerability to elevate privileges. The following products and...

Mozilla Firefox and Mozilla Firefox ESR security vulnerabilities

Mozilla Firefox is an open source web browser from the Mozilla Foundation.Mozilla Firefox ESR is an extended support version of Firefox web browser from the Mozilla Foundation.Mozilla Thunderbird is a suite of e-mail client software from the Mozilla Foundation that is separate from the Mozilla...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from failure to remove terminated but uncommitted requests from the queue list, which could lead to list corrupti...

Zeek 8.0.5

Zeek is a powerful network analysis framework that is much different from the typical IDS you may know. While focusing on network security monitoring, Zeek provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 15 years of research, Zeek ha...

Fedora 43 : firefox (2026-de370822e0)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-de370822e0 advisory. - New upstream release 147.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...

CVE-2021-20225 affecting package grub2 for versions less than 2.06-26

CVE-2021-20225 affecting package grub2 for versions less than 2.06-26. A patched version of the package is available...

CVE-2025-38556 affecting package kernel for versions less than 6.6.119.3-1

CVE-2025-38556 affecting package kernel for versions less than 6.6.119.3-1. A patched version of the package is available...

CVE-2025-38627 affecting package kernel for versions less than 6.6.119.3-1

CVE-2025-38627 affecting package kernel for versions less than 6.6.119.3-1. A patched version of the package is available...

CVE-2025-14512 affecting package glib for versions less than 2.78.6-6

CVE-2025-14512 affecting package glib for versions less than 2.78.6-6. A patched version of the package is available...

CVE-2025-13836 affecting package python3 for versions less than 3.12.9-7

CVE-2025-13836 affecting package python3 for versions less than 3.12.9-7. A patched version of the package is available...

CVE-2026-22251

wlc is a Weblate command-line client using Weblate's REST API. Prior to 1.17.0, wlc supported providing unscoped API keys in the setting. This practice was discouraged for years, but the code was never removed. This might cause the API key to be leaked to different servers...

CVE-2025-68472 MindsDB has improper sanitation of filepath that leads to information disclosure and DOS

MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.11.1, an unauthenticated path traversal in the file upload API lets any caller read arbitrary files from the server filesystem and move them into MindsDB’s storage, exposing sensitive data. The PU...

ROS-20260112-7335

A vulnerability in the sqpoll component of the Linux operating system is related to a memory release error. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Espressif ESP-IDF security vulnerabilities

Espressif ESP-IDF is an IoT development framework from China Loxin Espressif. A security vulnerability exists in Espressif ESP-IDF versions prior to 1.1.0, which stems from a USB event callback and user code sharing state without locking, which could lead to a double release...

libpq security update

13.23-1 - Rebase to upstream release 13.23 - Resolves: RHEL-131279 CVE-2025-12818...

Fedora: Security Advisory (FEDORA-2026-39e035a84c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ROS-20260112-7338

A vulnerability in the btrfsputblockgroup function of the fs/btrfs/block-group.c module of the Linux operating system kernel's btrfs file system support is related to a lack of memory release after an effective lifetime. Exploitation of the vulnerability could allow an attacker to cause a denial ...

buildah security update

1.41.8-1.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.41.8-1 - update to the latest content of https://github.com/containers/buildah/tree/release-1.41 https://github.com/containers/buildah/commit/f85ff89 - fixes 'CVE-2025-47913 buildah:...

PT-2026-38934

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description When CONFIG PAGE OWNER is enabled, freeing KASAN shadow pages during vmalloc cleanup triggers expensive stack unwinding that acquires RCU read locks. Processing a large purge list withou...

ROS-20260112-7363

A vulnerability in the Linux operating system kernel is related to resource release errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...