160766 matches found
ROS-20260924-73-0086
The vulnerability of the binderupdatepagerange function in the drivers/android/binderalloc.c module of the Linux operating system’s kernel is related to the use of memory after deallocation. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity,...
Linux Distros Unpatched Vulnerability : CVE-2026-97404
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Signature header. By sending a request with an empty URL-Signature header, an unauthenticate...
Fedora 43 : golang-x-perf (2026-2f89cc806e)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2f89cc806e advisory. Update to 19be9d8 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: qemu (UTSA-2026-124428)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124428 advisory. Unity Link Advisory UTSA-2026-124428 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libkcapi (UTSA-2026-124530)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124530 advisory. A flaw was found in libkcapi. When performing one-shot symmetric cipher operations on large inputs over 64 KiB in stateful modes such as Counter CTR or Cipher Block...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: qemu (UTSA-2026-124429)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124429 advisory. Unity Link Advisory UTSA-2026-124429 Tenable has extracted the preceding description block directly from the Unity Linux security advisory. Note that Nessus has not...
Linux Distros Unpatched Vulnerability : CVE-2026-75432
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in yaml-cpp 0.9.0 allows a remote attacker to obtain sensitive information via the src/scanner.cpp, Scanner::PopIndent, and Scanner::PushIndentTo...
CVE-2026-51995
An issue in geelen mcp-remote 0.1.32 through 0.1.38 allows a remote attacker to obtain sensitive information via the src/lib/authorization-server-metadata.ts, src/lib/utils.ts components...
Linux Distros Unpatched Vulnerability : CVE-2026-95897
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in Dask up to 2026.8.0. This affects the function fromnpystack of the file dask/array/core.py of the component Loader...
PT-2026-97790
Name of the Vulnerable Software and Affected Versions Halo versions 2.25.4 and 2.26.1 Description A remote flaw exists in the SpEL Handler component within the ReplyNotificationSubscriptionHelper.java file. This issue involves improper neutralization in an unknown function, which could allow a...
Cisco Identity Services Engine Multiple Vulnerabilities (cisco-sa-ise-multiauth-bypass-sgD2HbL4)
According to its self-reported version, Cisco ISE is affected by multiple vulnerabilities. - A vulnerability in an API of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to read specific files on the underlying operating system of an affected device. CVE-2026-76446 - A...
Security update for rabbitmq-server (important)
openSUSE security update: security update for rabbitmq-server ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21903-1 Rating: important References: bsc1266465 bsc1271318 bsc1271336 bsc1271337 bsc1271338 bsc1271339 bsc1271340 bsc1271343 bsc1271344...
Security update for python-GitPython (important)
openSUSE security update: security update for python-gitpython ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21874-1 Rating: important References: bsc1273357 bsc1273358 bsc1273359 bsc1273364 bsc1273414 bsc1273498 bsc1275745 bsc1275746 bsc1275747...
CVE-2026-97152: Heap-based Buffer Overflow
Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in the WebSocket transport, due to an unchecked copy of the Sec-WebSocket-Version header, through snprintf...
ROS-20260924-73-0051
The vulnerability of the buserror030 function in the Linux operating system is related to the assignment of the NULL pointer. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
CVE-2026-97233: Improper Neutralization of Input During Web Page Generation
A vulnerability was identified in volotat Anagnorisis up to 0.4.11. Affected by this issue is the function html of the file PlaylistManager.js of the component Media Filename Handler. Such manipulation of the argument filepath leads to cross site scripting. The attack can be launched remotely. Th...
CVE-2026-96880: Improper Authorization
A vulnerability was found in TaleLin lin-cms-spring-boot up to 0.2.1. This impacts the function getBook of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. Performing a manipulation of the argument ID results in improper...
CVE-2026-96882: Improper Authorization
A vulnerability was identified in TaleLin lin-cms-spring-boot up to 0.2.1. Affected by this vulnerability is the function searchBook of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. The manipulation leads to improper...
ROS-20260924-73-0093
The vulnerability of the gtpencapdestroy function in the drivers/net/gtp.c driver for Linux kernel network devices is related to the use of memory after release. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...
