CVE-2026-16441 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-21-openj9, openjdk-17-openj9, openjdk-25-openj9, openjdk-11-openj9, openjdk-26-openj9...

GHSA-PW53-4WCC-WM6V vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-21-openj9, openjdk-17-openj9, openjdk-25-openj9, openjdk-11-openj9, openjdk-26-openj9...

GHSA-CP45-6Q6C-3772 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-21-openj9, openjdk-17-openj9, openjdk-25-openj9, openjdk-11-openj9, openjdk-26-openj9...

RockyLinux 9 : java-25-openjdk (RLSA-2026:42899)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:42899 advisory. JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Improve DTLS handshaking CVE-2026-46917 JDK: Enhance JPEG handling CVE-2026-47010 JDK: Enhance...

MINI-FCRG-9V25-W2PR

Bulletin has no description...

EUVD-2026-42702

An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon RPD of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker sending a specific BGP update over an established BGP session to cause a Denial-of-Service DoS...

CVE-2026-60109 Zeek < 8.0.9 Null Pointer Dereference DoS via Kerberos KRB_ERROR Parsing

Zeek before 8.0.9 contains a null pointer dereference vulnerability in its Kerberos protocol analyzer that allows unauthenticated remote attackers to crash the sensor by sending a crafted KRBERROR message with error-code 25 KDCERRPREAUTHREQUIRED containing a PA-DATA element with padata-type 2, 3,...

MINI-25X2-FVJP-F98R

Bulletin has no description...

Ubuntu 25.10 / 26.04 LTS : Cyborg vulnerabilities (USN-8413-1)

The remote Ubuntu 25.10 / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8413-1 advisory. It was discovered that Cyborg did not properly enforce project ownership in the Accelerator Request ARQ API. An authenticated user could possibly...

Ubuntu 25.10 / 26.04 LTS : libjxl vulnerability (USN-8397-1)

The remote Ubuntu 25.10 / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8397-1 advisory. It was discovered that libjxl did not properly handle certain crafted PBM images. An attacker could possibly use this issue to cause libjxl to crash,...

Microsoft Windows Hotpatch Monitoring Service 缓冲区错误漏洞

Microsoft Windows is an operating system used on personal devices by the American company Microsoft. The Microsoft Windows Hotpatch Monitoring Service has a buffer error vulnerability. The following products and versions are affected: Windows Server 2025 Server Core installation, Windows 11 Versi...

CVE-2008-5341 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-21-openj9, openjdk-17-openj9, openjdk-25-openj9, openjdk-11-openj9, openjdk-26-openj9...

CVE-2007-3716 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-21-openj9, openjdk-17-openj9, openjdk-25-openj9, openjdk-11-openj9, openjdk-26-openj9...

CVE-2026-22018 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-21-openj9, openjdk, openjdk-17-openj9, openjdk-25-openj9, openjdk-11-openj9, openjdk-26-openj9...

Microsoft Windows TCP/IP 代码问题漏洞

Microsoft Windows TCP/IP is a component provided by Microsoft Corporation that offers TCP/IP configuration functions for Windows. There are code-related vulnerabilities in Microsoft Windows TCP/IP. Attackers can exploit these vulnerabilities to cause system denial-of-service attacks. The followin...

Microsoft Windows Kernel 安全漏洞

The Microsoft Windows Kernel is the kernel of the Windows operating system developed by Microsoft Corporation. There are security vulnerabilities in the Microsoft Windows Kernel. Attackers can exploit these vulnerabilities to gain higher privileges. The following products and versions are affecte...

UBUNTU-CVE-2026-41526

In KDE KCoreAddons before 6.25, KShell::quoteArgs is intended to safely quote arguments so that they can be passed to a shell command. This parsing does not adequately handle metacharacters, leading to an escape from the shell. All applications relying on this method in a security-critical path t...

CVE-2025-14213 Cato's Socket WebUI is vulnerable to OS Command Injection

Cato Networks’ Socket versions prior to 25 contain a command injection vulnerability that allows an authenticated attacker with access to the Socket web interface UI to execute arbitrary operating system commands as the root user on the Socket’s internal system...

SUSE SLES15 / openSUSE 15 Security Update : helm (SUSE-SU-2026:0948-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0948-1 advisory. This update for helm rebuilds it against the current go 1.25 security release. Tenable has extracted the preceding description...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : runc (SUSE-SU-2026:0949-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:0949-1 advisory. This update for runc rebuilds it against the current go 1.25 security release. Tenable has extracted the...