474595 matches found
CVE-2026-51267
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
PT-2026-66342
These are all security issues fixed in the freerdp-3.30.0-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-65623
Name of the Vulnerable Software and Affected Versions goshs versions 2.1.3 through 2.1.3 Description An authentication bypass exists in the SFTP server component when the application is started with a basic authentication string containing a username but an empty password e.g., -b 'admin:', the...
Oracle MySQL NET Connector (July 2026 CPU)
The 9.7.x versions of MySQL Connector/Net installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory. - Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Net. Supported versions that are affected are...
Apache Tomcat 10.1.24 < 10.1.58
The version of Tomcat installed on the remote host is prior to 10.1.58. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat10.1.58security-10 advisory. - Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This issue affect...
Linux Distros Unpatched Vulnerability : CVE-2026-54272
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Versions 10.1.1 through 10.2.0 are vulnerable to SSRF through...
SUSE SLES16: aws-nitro-enclaves-binaryblobs-upstream / aws-nitro-enclaves-cli / etc (SUSE-SU-2026:22841-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22841-1 advisory. - CVE-2026-41677: openssl: out-of-bounds read in PEM password callback when returning an oversized length in rust- openssl crate...
RockyLinux 8 : libreswan (RLSA-2026:46396)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:46396 advisory. librenswan: IKEv1 Denial of Service via RSA-SHA1 PKCS1 Version 1.5 Encrypted authentication payload CVE-2026-50721 librenswan: IKEv2 Denial of Service v...
PT-2026-65513
wakaru is a JavaScript decompiler and unminifier toolkit. From 1.0.0 until 1.4.0, @wakaru/cli sanitizes bundle-controlled module filenames only once before writing extracted modules, so a crafted filename containing overlapping traversal sequences such as ....// collapses to ../ after sanitizatio...
yelp security update
2:3.28.1-3.2 - Fix CVE-2026-13601 RHEL-190226...
PT-2026-65478
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. With the introduction of Grant Table v2 came the requirement to be able to switch between versions. Switching from v1 to v2 reduces the number of valid grant references, ...
PT-2026-65515
Pterodactyl is a free, open-source game server management panel. From 1.7.0 until 1.13.0, the authentication rate limiter defined in RouteServiceProvider::configureRateLimiting applied a single global bucket to the login and two-factor checkpoint endpoints instead of keying by IP or account: the...
PT-2026-66341
These are all security issues fixed in the netty-4.1.136-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11388-1 kubernetes1.33-apiserver-1.33.13-2.1 on GA media
These are all security issues fixed in the kubernetes1.33-apiserver-1.33.13-2.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-65621
Name of the Vulnerable Software and Affected Versions Pagy versions 43.0.0 through 43.5.5 Description In the Pagy::I18n.locale= setter within gem/lib/pagy/modules/i18n/i18n.rb, locale values are stored verbatim and subsequently used as path components to load YAML dictionary files. When an...
OPENSUSE-SU-2026:11387-1 helm3-3.21.3-4.1 on GA media
These are all security issues fixed in the helm3-3.21.3-4.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11392-1 kubevirt1.8-container-disk-1.8.4-3.1 on GA media
These are all security issues fixed in the kubevirt1.8-container-disk-1.8.4-3.1 package on the GA media of openSUSE Tumbleweed...
SUSE SLES15 Security Update : kernel (Live Patch 9 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:3286-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3286-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.31 fixes various security issues: The following security issues were fixed: -...
SUSE SLES15: kernel-livepatch-6_4_0-150600_23_84-default / etc (SUSE-SU-2026:3256-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3256-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.84 fixes various security issues: The following security issues were fixed: -...
