143257 matches found
GHSA-4633-3J49-MH5Q vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, homepage, langfuse, keep-fips, keep, peerdb-ui, langfuse-fips...
GHSA-35RM-7J9C-2F7M vulnerabilities
Vulnerabilities for packages: zed...
GHSA-PG7V-JWJ7-P798 vulnerabilities
Vulnerabilities for packages: superset, mlflow, open-webui...
SUSE SLES12 Security Update : gawk (SUSE-SU-2026:3211-1)
The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:3211-1 advisory. This update for gawk fixes the following issue: - CVE-2026-40468: integer overflow in the builtin.c program file bsc1271352. Tenable has extracted the...
SUSE SLES12 Security Update : ntfs-3g_ntfsprogs (SUSE-SU-2026:3213-1)
The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3213-1 advisory. This update for ntfs-3gntfsprogs fixes the following issues - CVE-2026-42616: heap buffer overflow in cat in cat.c bsc1271102. - CVE-2026-42617...
Critical Photon OS Security Update - PHSA-2026-5.0-90-0929
Updates of 'rubygem-concurrent-ruby' packages of Photon OS have been released...
Oracle Linux 10 : buildah (ELSA-2026-36199)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36199 advisory. - rebuild for CVE-2026-39822 - bump golang.org/x/crypto to v0.52.0 to fix CVE-2026-39830 - Rebuild for CVE-2026-25679 Tenable has extracted the...
Oracle Linux 10 : openssl (ELSA-2026-22314)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-22314 advisory. - Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768,...
Photon OS 5.0: Nasm PHSA-2026-5.0-0925
An update of the nasm package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0925. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Oracle Linux 10 : buildah (ELSA-2026-29195)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-29195 advisory. - rebuild for CVE-2026-39822 - bump golang.org/x/crypto to v0.52.0 to fix CVE-2026-39830 - Rebuild for CVE-2026-25679 Tenable has extracted the...
GHSA-8QQM-FP2Q-V734
creationtimestamp| type| source ---|---|--- 2026-07-23 23:59:46+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mre2ahctmm2e...
CVE-2026-16396
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in WebExtensions...
CVE-2026-16368
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the JavaScript: WebAssembly component...
CVE-2026-16357
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Graphics component...
CVE-2026-16764 OWASP DefectDojo API/Web serializers.py UserSerializer privileges management
A vulnerability was identified in OWASP DefectDojo 2.59.0. This issue affects the function UserSerializer of the file dojo/apiv2/serializers.py of the component API/Web. Such manipulation of the argument isstaff leads to improper privilege management. The attack may be performed from remote. The...
OPENSUSE-SU-2026:21432-1 Security update for gh
This update for gh fixes the following issues: Changes in gh: - CVE-2026-39821: reject all-ASCII xn-- Punycode labels in the vendored golang.org/x/net/idna package regardless of Go's unicode.Version boo1266618...
EUVD-2026-48428
The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to cause a memory corruption via a Read Request...
GHSA-R7WM-3CXJ-WFF9 vulnerabilities
Vulnerabilities for packages: flyway, spark, cass-config-builder, scala, apache-nifi-registry, infinispan, logstash, gradle, apicurio-registry, opensearch, spdx-tools-java, akhq, druid, tez, strimzi-kafka-operator, dependency-track, sonarqube, keycloak-config-cli, wildfly, apache-nifi...
Open Redirect
Overview Affected versions of this package are vulnerable to Open Redirect via the navigation mechanisms when attacker-supplied paths containing a backslash are processed. An attacker can redirect users to unintended external sites by crafting malicious links or inputs. Remediation Upgrade...