12405 matches found
SUSE CVE-2026-69198
ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.1.1 until 10.2.2, every special-use classification method is built on isInSubnet, which short-circuits to false whenever the address's own subnet mask is shorter than the reference range's mask. Th...
Oracle Linux 10 : kernel (ELSA-2026-49211)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-49211 advisory. - net/sched: clsapi: Handle TCACTCONSUMED in tcfqeventhandle CKI Backport Bot RHEL-214082 CVE-2026-64530 - ksm: use range-walk function to jump over...
Oracle Linux 10 : ELSA-2026-50144-0: / libgcrypt (ELSA-2026-501440)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-501440 advisory. - Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext Tenable has extracted the preceding description block directly from t...
Oracle Linux 10 : php8.4 (ELSA-2026-49914)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-49914 advisory. 8.4.23-1 - rebase to 8.4.23 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not...
CVE-2026-66300
SNOMED International Snowstorm contains a reflected XSS vulnerability within the "Web Route" redirection functionality. An attacker can inject arbitrary JavaScript which will execute upon a target user navigating to a crafted, malicious link. Fixed in 10.12.2 and 10.9.3...
EUVD-2026-52869
SNOMED International Snowstorm contains a reflected XSS vulnerability within the "Web Route" redirection functionality. An attacker can inject arbitrary JavaScript which will execute upon a target user navigating to a crafted, malicious link. Fixed in 10.12.2 and 10.9.3...
CVE-2026-66300
SNOMED International Snowstorm has a reflected XSS vulnerability in the Web Route redirection feature. An attacker can inject arbitrary JavaScript that executes when a user visits a crafted link. Affected software/version details are not enumerated in this summary beyond Snowstorm; the vulnerabil...
CLSA-2026-1784856203 TuxCare security update for engine.io (16 CVEs)
TuxCare rebuilt engine.io to address 16 CVEs. Fixed in 1.8.3-tuxcare.1...
CLSA-2026-1784682957 TuxCare security update for fast-uri (10 CVEs)
TuxCare rebuilt fast-uri to address 10 CVEs. Fixed in 3.0.3-tuxcare.2...
CLSA-2026-1784596279 TuxCare security update for dompurify (10 CVEs)
TuxCare rebuilt dompurify to address 10 CVEs. Fixed in 3.0.3-tuxcare.2...
CLSA-2026-1780707089 TuxCare security update for @angular (3 CVEs)
TuxCare rebuilt 19 @angular packages to address 3 CVEs. Fixed in 10.1.0-tuxcare.1...
CLSA-2026-1779842936 TuxCare security update for laravel/framework (1 CVE)
TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 10.48.28-p1+tuxcare...
CLSA-2026-1778805976 TuxCare security update for dompurify (10 CVEs)
TuxCare rebuilt dompurify to address 10 CVEs. Fixed in 3.2.3-tuxcare.1...
CLSA-2026-1777941826 TuxCare security update for org.springframework (10 CVEs)
TuxCare rebuilt 22 org.springframework packages to address 10 CVEs. Fixed in 5.1.20.RELEASE-tuxcare.1...
CLSA-2026-1777163884 TuxCare security update for handlebars (10 CVEs)
TuxCare rebuilt handlebars to address 10 CVEs. Fixed in 3.0.3-tuxcare.2...
CLSA-2026-1776126823 TuxCare security update for org.springframework (10 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 10 CVEs. Fixed in 5.3.24-tuxcare.1...
CLSA-2026-1775694727 TuxCare security update for angular-sanitize (16 CVEs)
TuxCare rebuilt angular-sanitize to address 16 CVEs. Fixed in 1.8.3-tuxcare.1...
CLSA-2026-1773706627 TuxCare security update for 40 packages (6 CVEs)
TuxCare rebuilt 40 packages to address 6 CVEs. Fixed in 10.1.42-tuxcare.1...