160528 matches found
PHP dns_get_record SSRF
The vulnerability of the dnsgetrecord function in the PHP programming language is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a remote attacker to perform an SSRF attack...
Kibana Workflows SSRF
The vulnerability of the Workflows interface of the Kibana data visualization service is related to insufficient testing of queries on the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...
Security Component Unauthorized Access
The vulnerability of the Security component of the Oracle Java SE software platform, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker operating remotely to gain...
LibreNMS XSS
The vulnerability of the LibreNMS network monitoring system is related to deficiencies in the blocking procedures. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
OpenTofu DoS
The vulnerability of the OpenTofu infrastructure management tool is related to the presence of vulnerabilities in the borrowed components. Exploiting these vulnerabilities can allow a malicious actor, operating remotely, to cause service failures...
Oracle Java SE JSE Unauthenticated Access Disclosure
The vulnerability of the JSE component of Oracle Java SE software, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to access control errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized...
Fedora 43 : golang-x-perf (2026-2f89cc806e)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2f89cc806e advisory. Update to 19be9d8 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...
Fedora 44 : patool (2026-23dc582dae)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-23dc582dae advisory. Bump to 4.1.0 rhbz2421500 and rhbz2508373 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: qemu (UTSA-2026-124428)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124428 advisory. Unity Link Advisory UTSA-2026-124428 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...
Linux Distros Unpatched Vulnerability : CVE-2026-97404
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Signature header. By sending a request with an empty URL-Signature header, an unauthenticate...
Oracle Linux 9 : skopeo (ELSA-2026-70641)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-70641 advisory. - rebuild for CVE-2026-56853 CVE-2026-56858 CVE-2026-33818 CVE-2026-56860 CVE-2026-56862 Tenable has extracted the preceding description block directl...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : libgit2 vulnerability (USN-8809-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8809-1 advisory. Kazuma Matsumoto and Isabel Mill discovered that libgit2 incorrectly handled certain repository URLs when using th...
Linux Distros Unpatched Vulnerability : CVE-2026-77762
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in Apache Tomcat allows an attacker to inject trailer...
PT-2026-97790
Name of the Vulnerable Software and Affected Versions Halo versions 2.25.4 and 2.26.1 Description A remote flaw exists in the SpEL Handler component within the ReplyNotificationSubscriptionHelper.java file. This issue involves improper neutralization in an unknown function, which could allow a...
Security update for python-GitPython (important)
openSUSE security update: security update for python-gitpython ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21874-1 Rating: important References: bsc1273357 bsc1273358 bsc1273359 bsc1273364 bsc1273414 bsc1273498 bsc1275745 bsc1275746 bsc1275747...
Security update for google-osconfig-agent (important)
openSUSE security update: security update for google-osconfig-agent ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21882-1 Rating: important References: bsc1272118 bsc1276722 bsc1278597 bsc1278967 bsc1279297 bsc1279414 Cross-References:...
Security update for ffmpeg-7 (important)
openSUSE security update: security update for ffmpeg-7 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21877-1 Rating: important References: bsc1220546 bsc1220549 bsc1234017 bsc1234029 bsc1237382 bsc1268595 bsc1269490 bsc1269550 bsc1272755 bsc127275...
Security update for rabbitmq-server (important)
openSUSE security update: security update for rabbitmq-server ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21903-1 Rating: important References: bsc1266465 bsc1271318 bsc1271336 bsc1271337 bsc1271338 bsc1271339 bsc1271340 bsc1271343 bsc1271344...
CVE-2026-96762 kvcache-ai mooncake RPC Path UnmountSegment authorization
A vulnerability was determined in kvcache-ai mooncake up to 0.3.12/0.3.13.post1. This affects the function UnmountSegment of the component RPC Path Handler. This manipulation of the argument clientid/segmentid causes authorization bypass. Remote exploitation of the attack is possible. The exploit...
CVE-2026-96762 kvcache-ai mooncake RPC Path UnmountSegment authorization
A vulnerability was determined in kvcache-ai mooncake up to 0.3.12/0.3.13.post1. This affects the function UnmountSegment of the component RPC Path Handler. This manipulation of the argument clientid/segmentid causes authorization bypass. Remote exploitation of the attack is possible. The exploit...