462362 matches found
RLSA-2026:47011 Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipv6: fix possible UAF in icmpv6rcv CVE-2026-53006 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to...
EUVD-2026-50119
The Easy Appointments WordPress plugin through 3.12.26 does not verify that the appointment targeted by its customer-data update action belongs to the current user; the action only checks a shared nonce that any authenticated user can obtain from their own appointment's edit form. A...
Permissive regular expression vulnerability in Tegalog -Fumy Otegaru Memo Logger-
Overview Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains the following vulnerability: Permissive Regular Expression CWE-625 - CVE-2026-64940 Yuji Tounai of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer...
[SECURITY] [DLA 4704-1] libraw security update
Debian LTS Advisory DLA-4704-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin July 29, 2026 https://wiki.debian.org/LTS Package : libraw Version : 0.20.2-1+deb11u3 0.20.2-2.1+deb12u2 CVE ID : CVE-2026-5342 CVE-2026-20884 CVE-2026-20889 CVE-2026-21413 CVE-2026-2466...
nodejs:22 security update
An update is available for module.nodejs, nodejs, module.nodejs-packaging, nodejs-packaging, nodejs-nodemon, module.nodejs-nodemon. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
gstreamer1-plugins-bad-free security update
1.22.12-7.3 - Fix incorrect bytes-per-pixel handling in rfbsrc plugin CVE-2026-59691 Resolves: RHEL-193557 1.22.12-7.2 - Fix buffer overflow in DTLS connection peer certificate subject DN handling CVE-2026-59692 Resolves: RHEL-193572...
PT-2026-65695
The Easy Appointments WordPress plugin through 3.12.26 does not verify that the appointment targeted by its customer-data update action belongs to the current user; the action only checks a shared nonce that any authenticated user can obtain from their own appointment's edit form. A...
CVE-2025-67403
Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in updateclass.php via the parameter classname...
CVE-2025-67407
Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in updatestudent.php via parameters fname and studentclass...
firefox security update
140.13.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 140.13.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 140.13.0-1 - Update to 140.13.0 ESR...
CVE-2025-67405
Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in updatepassword.php via the parameter newpassword...
Oracle Linux 8 : libtiff (ELSA-2026-47184)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-47184 advisory. 4.0.9-38 - fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 RHEL-189371 Tenable has extracted the preceding description block...
Rockwell Automation Micro850/870 Dependency on Vulnerable Third-Party Component (CVE-2025-13823)
A security issue was found in the IPv6 stack in the Micro850 and Micro870 controllers. This issue occurs when the controllers receive multiple malformed packets, causing the controller to enter a recoverable fault fault code 0xFE60. To recover the controller, the fault must be cleared. This plugi...
SUSE SLES15 Security Update : kernel (Live Patch 26 for SUSE Linux Enterprise 15 SP6) (SUSE-SU-2026:3344-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3344-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.112 fixes various security issues: The following security issues were fixed: -...
SUSE SLES16 Security Update : libssh (SUSE-SU-2026:22956-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22956-1 advisory. - CVE-2026-15370: stack buffer overflow in SFTP server longname construction bsc1272162. - CVE-2026-59843: denial of service via...
SUSE SLES15 Security Update : yq (SUSE-SU-2026:3327-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3327-1 advisory. Update to v4.53.3. - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass a...
Fedora 44 : restic (2026-c87cc5b948)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c87cc5b948 advisory. Update to 0.19.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...
RockyLinux 8 : perl-IO-Compress (RLSA-2026:30858)
The remote RockyLinux 8 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:30858 advisory. perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob CVE-2026-48962 Tenable has extracted the preceding description...
RHEL 8 : kernel (RHSA-2026:47869)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:47869 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: KVM: x86: Don't recheck L1...
