The vulnerability of cloud-based software for Opcenter X’s digital production capabilities, related to errors in verifying cryptographic signatures, allows a hacker to gain full access to the application.

The vulnerability of cloud-based software for digital production in Opcenter X is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to gain full access to the application...

Siemens’ vulnerabilities in engineering and industrial software, related to the use of an unreliable search path, allow attackers to escalate their privileges.

The vulnerability of Siemens’ engineering and industrial software is related to the use of an unreliable search path. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Windows Terminal emulator for operating systems, which allows a hacker to execute arbitrary code.

The vulnerability of the Windows Terminal emulator for operating systems is related to a numerical overflow issue. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Oracle Linux 10 : glib2 (ELSA-2026-19148)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-19148 advisory. 2.80.4-13 - Fix CVE-2025-14087 and CVE-2025-14512 Tenable has extracted the preceding description block directly from the Oracle Linux security...

Malicious code in phantomx-tool-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b5e528800706b219f69d8bc87eb77203c752c8b4720e8c0b8fc04cad6df8ce1d When the tool-server bin is launched, the package establishes a persistent Socket.IO client connection to a remote orchestration server and registers...

EUVD-2026-44969

The Janssen Project is an open-source identity and access management IAM platform. Prior to 2.0.0, jans-auth-server accepts unsigned JWE request objects because JwtAuthorizationRequest skips inner signature validation when jwe.getSignedJWTPayload returns null, and...

HPLIP: Incomplete Fix for CVE-2026-8631

A flaw was found in HPLIP HP Linux Imaging and Printing Software. This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. This can occur through an integer overflow in the hpcups processing path when handling...

CVE-2026-56375

A flaw was found in ImageMagick. This vulnerability, a memory leak in the ASHLAR coder, occurs when an image processing action fails. An attacker can exploit this by triggering failed actions, leading to the exhaustion of memory resources. This can result in a denial of service DoS, making the...

[SECURITY] Fedora 44 Update: python-bcrypt-4.3.0-14.fc44

Modern password hashing for your software and your servers...

The vulnerability of embedded software developed by Qualcomm, related to improper array indexing, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of embedded Qualcomm software lies in improper array indexing. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of embedded software in Qualcomm’s chips, caused by the “race-to-obtain” situation, allows a hacker to disclose protected information.

The vulnerability of embedded software in Qualcomm products stems from the competitive situation. Exploiting this vulnerability can allow a hacker to disclose protected information...

The vulnerability of Microsoft Surface sensor display microprogramming software, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of Microsoft Surface sensor displays is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of embedded software developed by Qualcomm, related to operations performed outside of memory buffers, allows attackers to read and manipulate data.

The vulnerability of the BTM Action Frame Handler component in Qualcomm’s embedded software lies in the fact that the operation data is written outside of the memory buffer. Exploiting this vulnerability allows a remote attacker to read and manipulate the data...

The vulnerability of embedded Qualcomm microprogramming software, related to reading memory outside the buffer, allows attackers to read and manipulate data.

The vulnerability of microprogramming software in embedded Qualcomm chips relates to reading memory data outside the buffer. Exploiting this vulnerability allows a remote attacker to read and manipulate data...

The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in its failure to address the issue of eliminating special elements used in the operating system’s command line. This allows attackers to execute arbitrary code.

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to the lack of measures taken to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the Adobe Animate program for creating multimedia and computer animations lies in the incorrect limitation of the path to the restricted catalog. This allows attackers to execute arbitrary code.

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to incorrect restrictions on the path to the restricted catalog. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2026-61871

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-26 and 6.9.13-51 contains a memory leak in the ICON decoder that occurs when a memory allocation fails. Processing a crafted ICON file...

PT-2026-60462

Name of the Vulnerable Software and Affected Versions AVideo versions prior to 29.1 Description An OS command injection issue exists in the plugin/API/standAlone/functions.php file. The listFFmpegProcesses function interpolates unsanitized keyword parameters within single quotes without proper...

Oracle Linux 9 : cifs-utils (ELSA-2026-39576)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-39576 advisory. 7.6-2 - resolves: RHEL-192982 - fix krb5 mount regression 7.6-1 - Update to version 7.6 - resolves: RHEL-185761 - CVE-2026-12505 cifs-utils: LPE via cifs.spneg...

.NET 8.0 security update

8.0.128-1.0.1 - Add support for Oracle Linux 8.0.128-1 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181056 8.0.127-1 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173924...