461165 matches found
LibRaw security update
0.21.1-2.1 - Fix CVE-2026-51235 Resolves: RHEL-219221...
PT-2026-68522
Name of the Vulnerable Software and Affected Versions Apache Portable Runtime Utility versions 1.6.0 through 1.6.3 Description A heap-based buffer overflow occurs in the redis client of the Apache Portable Runtime Utility. A heap-based buffer overflow is a memory corruption issue that happens whe...
MiracleLinux 8 : java-21-openjdk-21.0.12.0.8-1.1.el8.ML.1 (AXSA:2026-1475:08)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1475:08 advisory. JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Improve DTLS handshaking CVE-2026-46917 JDK: Enhance JPEG handling CVE-2026-47010 JDK:...
EulerOS 2.0 SP15 : httpd (EulerOS-SA-2026-2888)
According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A NULL pointer dereference in moddavlock in Apache HTTP Server 2.4.66 and earlier may allow an attacker to crash the server with a malicious...
Fedora 44 : chromium (2026-976bbbc661)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-976bbbc661 advisory. security release chromium-151.0.7922.71 includes 370 security fixes: CVE-2026-17650 - CVE-2026-18019 Tenable has extracted the preceding description...
Important Photon OS Security Update - PHSA-2026-5.0-92-0944
Updates of 'linux' packages of Photon OS have been released...
Fedora 44 : libXfont2 (2026-c864897d56)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c864897d56 advisory. libXfont2 2.0.9 CVE-2026-59679, CVE-2026-44950 Tenable has extracted the preceding description block directly from the Fedora security advisory. Not...
Security update for wireshark (important)
openSUSE security update: security update for wireshark ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21534-1 Rating: important References: bsc1263727 bsc1263758 bsc1263759 bsc1263760 bsc1263761 bsc1266670 bsc1271133 bsc1271134 bsc1271136 bsc12711...
Security update for php8 (critical)
openSUSE security update: security update for php8 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21532-1 Rating: critical References: bsc1273075 bsc1273076 bsc1273077 bsc1273078 Cross-References: CVE-2026-17543 CVE-2026-17544 CVE-2026-7260...
ffmpeg-4-4.4.8-3.1 on GA media (moderate)
ffmpeg-4-4.4.8-3.1 on GA media Announcement ID: openSUSE-SU-2026:11448-1 Rating: moderate Cross-References: CVE-2026-64830 CVE-2026-64832 CVE-2026-64835 CVE-2026-66038 CVE-2026-66039 CVSS scores: CVE-2026-64830 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2026-64830 SUSE : 8.5...
About the security content of macOS Sonoma 14.8.9
About the security content of macOS Sonoma 14.8.9 This document describes the security content of macOS Sonoma 14.8.9. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or release...
kernel security, bug fix, and enhancement update
5.14.0-687.36.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
glibc security update
2.28-251.0.4.40 - Forward port of Oracle patches Reviewed-by: David Faust Oracle history: July-13-2026 Cupertino Miranda - 2.28-251.0.4.38 - Forward port of Oracle patches Reviewed-by: Jose E. Marchesi May-26-2026 Cupertino Miranda - 2.28-251.0.4.37 - Forward port of Oracle patches Reviewed-by:...
Oracle Linux 9 : gimp (ELSA-2026-50817)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50817 advisory. - fix CVE-2026-42169 - fix CVE-2026-66758 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note...
CVE-2026-67687
The CVE-2026-67687 case concerns ICS-Park Smart Park Management System v2.0 (based on RuoYi). A vertical privilege escalation exists via missing authorization checks in two endpoints: /system/role/save (RoleController.java) and /system/user/update (UserController.java). An authenticated low-privi...
WP < 7.0.3 - Subscriber+ Email Change Confirmation Bypass
Description WordPress does not always validate a new email address consistently when a profile is updated, which could allow any authenticated user to change their account email address without completing the ownership confirmation step...
amazon-ecs-init-1.106.0-1.1 on GA media (moderate)
amazon-ecs-init-1.106.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11443-1 Rating: moderate Cross-References: CVE-2026-10722 CVSS scores: CVE-2026-10722 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-10722 SUSE : 8.7...
Important Photon OS Security Update - PHSA-2026-5.0-92-0947
Updates of 'libgcrypt', 'python3-mistune', 'gnuplot', 'tpm2-tools', 'glib-networking' packages of Photon OS have been released...