Linux kernel crypto_authenc_esn_create() Data Compromise

The vulnerability of the cryptoauthencesncreate function in the crypto/authencesn.c module of the Linux kernel’s cryptographic subsystem is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

AppArmor d_namespace_path Path Traversal

The vulnerability of the dnamespacepath function in the security/apparmor/path.c module of the AppArmor security component for the Linux operating system is related to insufficient data structure validation. Exploiting this vulnerability could allow an attacker to access protected information or...

Cisco Secure Workload protection Multi-cloud Data Center Input Validation

The vulnerability of the Cisco Secure Workload protection mechanism for multi-cloud data centers previously known as Tetration is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of t...

ClamAV Insufficient Validation

The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

ClamAV Insufficient Validation

The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

ClamAV Insufficient Validation

The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

Grafana MCP Server SSRF

The vulnerability of the grafanaapirequest tool on the Grafana MCP Server platform, which is used for monitoring and surveillance, is related to insufficient validation of requests at the server-side. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...

Microsoft Exchange Server Privilege Escalation

The vulnerability of Microsoft Exchange Server is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

ClamAV Insufficient Validation

The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

ClamAV Insufficient Validation

The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

ClamAV Insufficient Validation

The vulnerability of the ClamAV antivirus software is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

RHEL 9 : nodejs:24 (RHSA-2026:73838)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:73838 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language...

AlmaLinux 9.2 [TuxCare] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc (ALMALINUX9.2:CLSA-2025:1738695770)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1738695770 advisory. - Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from...

Linux Distros Unpatched Vulnerability : CVE-2026-101278

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcgettld of the file libopendmarc/opendmarctld....

AlmaLinux 9.6 [TuxCare] Security Update: nodejs / nodejs-devel / nodejs-docs / nodejs-full-i18n / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1783353048)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783353048 advisory. - A flaw in Node.js WebCrypto implementation can crash the process if the input of subtle.encrypt is a multiple of 2GiB. This...

AlmaLinux 10 : nodejs24 (ALSA-2026:73428)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:73428 advisory. undici: undici: Authentication bypass via cross-origin cache poisoning due to missing origin isolation CVE-2026-85152 undici: undici: TLS certificate...

AlmaLinux 9.6 [TuxCare] Security Update: buildah / buildah-tests (ALMALINUX9.6:CLSA-2026:1778254382)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778254382 advisory. - url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. CVE-2026-25679 Note that Nessus has not...

RHEL 8 : nodejs:24 (RHSA-2026:74085)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:74085 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language...

Rocky Linux 9.6 [TuxCare] Security Update: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1779957268)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779957268 advisory. - Session Fixation vulnerability in Apache Tomcat via rewrite valve. This issue affects Apache Tomcat: from 11.0.0-M1 through...

Atlassian Confluence 7.4.x < 9.2.24 / 9.3.x < 10.2.17 (CONFSERVER-104433)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104433 advisory. - Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty...