459077 matches found
kernel security, bug fix, and enhancement update
6.12.0-211.34.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
CVE-2026-67687
Insecure Permissions vulnerability in ics-park v.2.0 allows a remote attacker to escalate privileges via the /system/role/save endpoint in RoleController.java and system/user/update endpoint in UserController.java...
TencentOS Server 4: libssh2 (TSSA-2026:0785)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0785 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
SUSE SLES15 Security Update : google-guest-agent (SUSE-SU-2026:3497-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3497-1 advisory. This update for google-guest-agent fixes the following issue - CVE-2026-56852: golang.org/x/text/unicode/norm: improper handling of input...
RockyLinux 9 : libgcrypt (RLSA-2026:50147)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:50147 advisory. Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext CVE-2026-41989 Tenable has extracted the preceding description block...
TencentOS Server 4: firefox (TSSA-2026:0788)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0788 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
Photon OS 5.0: Nodejs PHSA-2026-5.0-92-0942
An update of the nodejs package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0942. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
The vulnerabilities of the functions qla2x00_update_optrom() and qla2x00_manage_host_stats() in the driver/scsi/qla2xxx/qla_bsg.c module of the SCSI device driver for the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerabilities of the functions qla2x00updateoptrom and qla2x00managehoststats in the drivers/scsi/qla2xxx/qlabsg.c module of the SCSI device driver for the Linux operating system are related to operations involving resources after their expiration. Exploiting these vulnerabilities could all...
Schneider Electric SCADAPack and RemoteConnect Improper Check For Unusual or Exceptional Conditions (CVE-2026-0667)
CWE-754 Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause remote code execution, denial of service, and loss of confidentiality and integrity of the RTU controller when an unauthenticated attacker sends specially crafted Modbus TCP packets to the device...
Fedora 43 : ImageMagick (2026-63fca288d6)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-63fca288d6 advisory. Update to 7.1.2.27 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested...
CLSA-2026-1785969383 TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 4 CVEs. Fixed in 5.3.39-tuxcare.18...
Unauthenticated Nuxt DevTools RPC allows arbitrary command execution on the developer's host
Impact Nuxt DevTools development mode only exposes a bidirectional RPC channel over the Vite HMR WebSocket via the nuxt:devtools:rpc plugin. On affected versions the channel has no authentication: any client that can reach the Vite HMR endpoint ws://:/, subprotocol vite-hmr can call RPC methods,...
[SECURITY] [DLA 4719-1] p7zip security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4719-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler August 05, 2026 https://wiki.debian.org/LTS -...
CLSA-2026-1785958008 TuxCare security update for org.springframework (11 CVEs)
TuxCare rebuilt 25 org.springframework packages to address 11 CVEs. Fixed in 6.1.15-tuxcare.1...
CLSA-2026-1785957662 TuxCare security update for org.springframework (7 CVEs)
TuxCare rebuilt 23 org.springframework packages to address 7 CVEs. Fixed in 5.2.13.RELEASE-tuxcare.7...
[SECURITY] [DLA 4718-1] 7zip security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4718-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler August 05, 2026 https://wiki.debian.org/LTS -...
CLSA-2026-1785954263 TuxCare security update for org.springframework (9 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 9 CVEs. Fixed in 5.3.37-tuxcare.9...
Important: Red Hat Security Advisory: libpq security update
An update for libpq is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
MAL-2026-13363 Malicious code in @cliphijack/santaclaude (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6a4fa42a55635225fb914eaea97cbc9699efb6cc197445eacf32e6592b60675 The santaclaude bin opens a persistent WebSocket connection to https://santaclaude.app and long-polls /api/control/claim. Messages received from the...