google-osconfig-agent-20260611.00-1.1 on GA media (moderate)

google-osconfig-agent-20260611.00-1.1 on GA media Announcement ID: openSUSE-SU-2026:11032-1 Rating: moderate Cross-References: CVE-2026-33814 CVSS scores: CVE-2026-33814 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one...

RHEL 8 : mysql:8.4 (RHSA-2026:26180)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:26180 advisory. MySQL is a multi-user, multi-threaded SQL database server. MySQL is a client/server implementation consisting of a server daemon mysqld and...

RHEL 9 : podman (RHSA-2026:26445)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:26445 advisory. The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods...

Fedora 44 : hugo (2026-7fe2bb8a08)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7fe2bb8a08 advisory. Update to 0.162.1 rhbz2455512 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not test...

RHEL 10 : ncurses (RHSA-2026:26357)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:26357 advisory. The ncurses new curses library routines are a terminal-independent method of updating character screens with reasonable optimization. The ncurses...

Photon OS 5.0: Bindutils PHSA-2026-5.0-0876

An update of the bindutils package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0876. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

GHSA-C653-97M9-RCG9

creationtimestamp| type| source ---|---|--- 2026-06-15 23:41:15+00:00| seen| https://gist.github.com/alon710/f42a6954ca4bbe69929b54a65ee51645...

GHSA-HVCG-QMG6-JM4C

creationtimestamp| type| source ---|---|--- 2026-06-15 22:41:28+00:00| seen| https://gist.github.com/alon710/8b8701e874abebd14b3f406541fda6b0 2026-07-14 01:00:05+00:00| seen| https://t.me/bdufstecru/3254 2026-07-15 00:00:34+00:00| published-proof-of-concept| https://t.me/bdufstecru/3254...

GHSA-999R-QQ7V-R334

creationtimestamp| type| source ---|---|--- 2026-06-15 21:41:17+00:00| seen| https://gist.github.com/alon710/35567f659305b91f7bbc4ee7db5dd621...

@alok5953/videoextract (>=1.0.0, <=1.0.7), @aspects-ai/workspace-cli (>=0.1.16, <=0.1.24) +92 more potentially affected by CVE-2026-30121 via remotion (>=4.0.0, <=4.0.409)

remotion NPM version =4.0.0, =1.0.0, =0.1.16, =6.0.1, =8.0.3, =0.1.38, =0.1.91, =0.1.0, =5.2.0, =0.0.2, =1.0.0, =1.0.0, =0.1.4, =0.1.27 and more Source cves: CVE-2026-30121 Source advisory: OSV:GHSA-G6PC-6676-C23J...

Important: Red Hat Security Advisory: Kiali 1.73.32 for Red Hat OpenShift Service Mesh 2.6

Kiali 1.73.32 for Red Hat OpenShift Service Mesh 2.6 is now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

GHSA-RQ7W-G337-39QQ

creationtimestamp| type| source ---|---|--- 2026-06-15 21:11:17+00:00| seen| https://gist.github.com/alon710/be69f9c7f59f396504036ec9a026919b 2026-06-15 21:21:08+00:00| seen| https://gist.github.com/alon710/3a26ff1fbe9d67163f9157e06a925a54...

GHSA-CJ93-CHG6-VGV8 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-G7R4-M6W7-QQQR vulnerabilities

Vulnerabilities for packages: vite, kubeflow-pipelines...

Interpretation Conflict

Overview python-multipart is an A streaming multipart parser for Python Affected versions of this package are vulnerable to Interpretation Conflict through the parseoptionsheader function. An attacker can bypass field name or filename-based access controls, or manipulate file upload destinations ...

Buffer Overflow

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Buffer Overflow in the Buffer API. An attacker can cause application crashes or trigger incorrect memory...

DEBIAN-CVE-2025-55645

A heap buffer overflow in the gfcencsetpssh function isomedia/drmsample.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

UBUNTU-CVE-2025-55652

A heap buffer overflow in the gfisomvpconfignew function isomedia/avcext.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

Arbitrary Code Injection

Overview protobufjs is a protocol buffer for JavaScript & TypeScript. Affected versions of this package are vulnerable to Arbitrary Code Injection via the pbjs static code generation. An attacker can execute arbitrary code by providing crafted schema names that are incorporated into generated...

protobufjs-cli: Code injection in pbjs static output from crafted JSON descriptor names

Summary A previous fix for unsafe name handling in pbjs static / static-module code generation was incomplete. Affected versions of protobufjs-cli could still emit unsafe JavaScript references when generating static output from crafted JSON descriptor input. The common case of parsing schemas fro...