Fedora 43 : pgadmin4 (2026-4e47f4d911)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4e47f4d911 advisory. Regenerate vendor tarball. Fixes CVE-2025-13465. Tenable has extracted the preceding description block directly from the Fedora security advisory...

Tanium Comply 安全漏洞

Tanium Comply is a risk assessment and compliance checking module developed by the American company Tanium. Tanium Comply has security vulnerabilities, which stem from improper default permission settings...

Moodle 安全漏洞

Moodle is an open-source e-learning software platform developed by Moodle. It is also known as a course management system, learning management system, or virtual learning environment. Versions of Moodle 5.0 and earlier contained security vulnerabilities. These vulnerabilities were caused by...

Tanium Benchmark 安全漏洞

Tanium Benchmark is a security and operations status assessment module developed by the American company Tanium. Tanium Benchmark has security vulnerabilities, which stem from improper default permission settings...

Tanium Partner Integration 安全漏洞

Tanium Partner Integration is a set of open interfaces provided by the American company Tanium. There are security vulnerabilities associated with Tanium Partner Integration, and these vulnerabilities stem from improper default permission settings...

Debian dla-4468 : libtomcat9-embed-java - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4468 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4468-1 [email protected]...

Debian dsa-6120 : libtomcat10-embed-java - security update

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6120 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6120-1 [email protected]...

WeKan 安全漏洞

WeKan is an open-source dashboard application developed by WeKan. Versions of WeKan prior to 8.20 contained security vulnerabilities. These vulnerabilities were caused by operations on unknown functions in the file server/methods/positionHistory.js, resulting in a lack of authorization...

traefik2-2.11.35-1.1 on GA media (moderate)

traefik2-2.11.35-1.1 on GA media Announcement ID: openSUSE-SU-2026:10143-1 Rating: moderate Cross-References: CVE-2025-54386 CVE-2025-58181 CVE-2025-66490 CVE-2026-22045 CVSS scores: CVE-2025-58181 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2025-58181 SUSE : 6.9...

FreeBSD : python -- several security vulnerabilities (bfe9adc8-0224-11f1-8790-c5fb948922ad)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the bfe9adc8-0224-11f1-8790-c5fb948922ad advisory. The Python project announces a new release with several security fixes: Tenable has extracted...

USN-8015-2 linux-realtime, linux-realtime-6.8, linux-raspi-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - SMB network file system; - iouring subsystem; CVE-2025-38561, CVE-2025-39698, CVE-2025-40019...

USN-8013-3 linux-realtime, linux-intel-iot-realtime vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - SMB network file system; CVE-2025-38561, CVE-2025-40019...

GHSA-HX9Q-6W63-J58V vulnerabilities

Vulnerabilities for packages: emissary, datadog-agent, kserve...

GHSA-VQQR-RMPC-HHG2 vulnerabilities

Vulnerabilities for packages: wolfictl, cg...

USN-8014-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Unix domain sockets; CVE-2025-40019, CVE-2025-40214...

USN-8013-1 linux, linux-aws, linux-azure, linux-azure-5.15, linux-gcp, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-oracle, linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - SMB network file system; CVE-2025-38561, CVE-2025-40019...

USN-8010-1 python-pip vulnerabilities

Several security issues were discovered in the libraries bundled in pip. An attacker could possibly use these issues to perform a variety of attacks, such as denial of service or arbitrary code execution...

GHSA-RVR2-R3PV-5M4P vulnerabilities

Vulnerabilities for packages: py3-xet-core...

Drupal Group invite 安全漏洞

Drupal Group invite is a membership invitation module provided by the Drupal company. Versions prior to 2.3.9, 3.0.4, and 4.0.4 of Drupal Group invite contained security vulnerabilities. These vulnerabilities were due to improper exception condition checks, which could lead to forced browsing...

Melon 安全漏洞

Melon is a C-language code library developed by Niklaus Schen. Versions of Melon prior to 9df9292 contained security vulnerabilities. These vulnerabilities stemmed from the lack of a maximum length limit in the HTTP component, which could lead to denial-of-service attacks by consuming memory...