Fedora 43 : rclone (2026-2bb2aee489)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-2bb2aee489 advisory. Update to 1.74.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Updated rootcerts, nss & firefox packages fix security vulnerabilities

Use-after-free in the DOM: Core & HTML component. CVE-2026-6746 Use-after-free in the WebRTC component. CVE-2026-6747 Uninitialized memory in the Audio/Video: Web Codecs component. CVE-2026-6748 Information disclosure due to uninitialized memory in the Graphics: Canvas2D component. CVE-2026-6749...

Kirby 安全漏洞

Kirby is a set of open-source content management systems based on files. Versions of Kirby prior to 4.9.0 and 5.4.0 have security vulnerabilities. These vulnerabilities stem from insufficient checks for consistency in permissions for functions like Panel and REST API’s pages.access/list and...

python311-Django4-4.2.30-2.1 on GA media (moderate)

python311-Django4-4.2.30-2.1 on GA media Announcement ID: openSUSE-SU-2026:10708-1 Rating: moderate Cross-References: CVE-2026-35192 CVE-2026-5766 CVE-2026-6907 CVSS scores: CVE-2026-35192 SUSE : 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N CVE-2026-35192 SUSE : 2.3...

Gibbon 安全漏洞

Gibbon is a school platform developed by the Gibbon team that addresses practical problems encountered by educators every day. Versions of Gibbon prior to v30.0.01 contained security vulnerabilities. These vulnerabilities were caused by path traversal attacks. When attempting to extract PHP files...

Amazon Linux 2 : java-11-amazon-corretto, --advisory ALAS2-2026-3300 (ALAS-2026-3300)

The version of java-11-amazon-corretto installed on the remote host is prior to 11.0.31+11-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3300 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produc...

CVE-2026-42586 vulnerabilities

Vulnerabilities for packages: thingsboard, management-api-for-apache-cassandra-5.0, trino, tez, druid, celeborn...

GHSA-V2FC-QM4H-8HQV vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, ruby4.0-rails, ruby3.3-rails, kube-logging-operator, ruby3.2-rails...

GHSA-WG35-8JPF-2XV3 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, thingsboard...

GHSA-XX64-WWV2-HCQQ vulnerabilities

Vulnerabilities for packages: pixi, uv...

GHSA-WWPQ-F5C3-7HVX vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, zipkin, kafbat-ui-fips, camunda-zeebe, thingsboard, conductor-fips, apache-nifi-registry, nacos-docker, nacos, conductor, kafbat-ui...

GHSA-RGRR-P7GP-5XJ7 vulnerabilities

Vulnerabilities for packages: seata, apache-hop, management-api-for-apache-cassandra-5.0, hadoop-fips, management-api-for-apache-cassandra-4.1, tez, management-api-for-apache-cassandra-4.0, apache-hop-fips, tinkerpop, thingsboard, celeborn, pinot-fips, druid, pinot, trino...

GHSA-JP9R-MMHW-VFF3 vulnerabilities

Vulnerabilities for packages: jenkins...

GHSA-P334-GFHQ-C7W6 vulnerabilities

Vulnerabilities for packages: jenkins...

GHSA-P8XM-42R7-89XG vulnerabilities

Vulnerabilities for packages: wizer, yara-x...

GHSA-JP9R-MMHW-VFF3 vulnerabilities

Vulnerabilities for packages: jenkins...

GHSA-R67J-R569-JRWP vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce...

OpenStack Ironic 安全漏洞

OpenStack Ironic is an integrated OpenStack application developed under the OpenStack open source framework. It is used to configure bare machines rather than virtual machines. OpenStack Ironic versions 35.x and earlier contain security vulnerabilities, which stem from the instanceinfokstemplate...

Slackware Linux 15.0 / current mozilla-thunderbird Multiple Vulnerabilities (SSA:2026-128-02)

The version of mozilla-thunderbird installed on the remote host is prior to 140.10.2esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-128-02 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues...

PraisonAI 安全漏洞

PraisonAI is a low-code multi-agent collaboration framework developed by Mervin Praison. Versions of PraisonAI prior to 4.6.37 and PraisonAIagents prior to 1.6.37 have security vulnerabilities. These vulnerabilities stem from unresolved tool name resolution issues, which may allow attackers to...