OPENSUSE-SU-2026:11471-1 tekton-cli-0.46.0-1.1 on GA media

These are all security issues fixed in the tekton-cli-0.46.0-1.1 package on the GA media of openSUSE Tumbleweed...

TencentOS Server 3: grafana (TSSA-2026:0805)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0805 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

EulerOS 2.0 SP15 : lcms2 (EulerOS-SA-2026-2932)

According to the versions of the lcms2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow check is performed after the...

Stable Channel Update for Desktop

The Stable channel has been updated to 151.0.7922.108/.109 for Windows and Mac and 151.0.7922.108 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...

CVE-2024-39024

In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execution...

SUSE SLED15: libwireshark19 / libwiretap16 / libwsutil17 / wireshark / etc (SUSE-SU-2026:3501-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3501-1 advisory. Update to version 4.6.7: - CVE-2026-5299: ICMPv6 dissector crash bsc1263757. - CVE-2026-5401: AFP dissector...

CVE-2024-39024

In Packetfence 13.2.0 , an authenticated remote code execution (RCE) vulnerability exists within the WebGui interface setting. The root cause is located in Interface.pm at line 64 within the create function, where the $vlan_id variable—derived from user input—is only validated on the client side....

OPENSUSE-SU-2026:11462-1 gleam-1.18.1-1.1 on GA media

These are all security issues fixed in the gleam-1.18.1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-68495

Name of the Vulnerable Software and Affected Versions MissionSquad mcp-api versions prior to 1.11.9 Description Command injection is possible via remote attack in the NPM Package Version Handler component. The issue resides in the this.packageService.installPackage function within the...

CVE-2026-67687

Insecure Permissions vulnerability in ics-park v.2.0 allows a remote attacker to escalate privileges via the /system/role/save endpoint in RoleController.java and system/user/update endpoint in UserController.java...

EulerOS 2.0 SP13 : haproxy (EulerOS-SA-2026-2968)

According to the versions of the haproxy packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches a previously announced...

EulerOS 2.0 SP15 : mutt (EulerOS-SA-2026-2898)

According to the versions of the mutt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : mutt before 2.3.2 sometimes truncates the hashpasswd by one byte for IMAP authcram MD5 digest.CVE-2026-43860 mutt before 2.3.2 has an infinite loop ...

CVE-2026-67688

ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file upload module. This allows a remote attacker to execute arbitrary code...

PT-2026-68820

Name of the Vulnerable Software and Affected Versions Autodesk products affected versions not specified Description An Untrusted Pointer Dereference occurs when certain Autodesk products parse a maliciously crafted BMP file. This issue allows a malicious actor to execute arbitrary code within the...

VulnCheck KEV: CVE-2018-14013

Synacor Zimbra Collaboration Suite Collaboration before 8.8.11 has XSS in the AJAX and html web clients...

OPENSUSE-SU-2026:11468-1 python313-cryptography-50.0.0-1.1 on GA media

These are all security issues fixed in the python313-cryptography-50.0.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11464-1 python313-Django-6.0.8-1.1 on GA media

These are all security issues fixed in the python313-Django-6.0.8-1.1 package on the GA media of openSUSE Tumbleweed...

Google Chrome < 151.0.7922.108 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 151.0.7922.108. It is, therefore, affected by multiple vulnerabilities as referenced in the 202608stable-channel-update-for-desktop01193673229 advisory. - Use after free in Skia. CVE-2026-19154, CVE-2026-19176 - Use after...

macOS 14.x < 14.8.9 (148172)

The remote host is running a version of macOS / Mac OS X that is 14.x prior to 14.8.9. It is, therefore, affected by a vulnerability: - An authentication issue was addressed with improved state management. CVE-2026-65400 Note that Nessus has not tested for this issue but has instead relied only o...

Linux Distros Unpatched Vulnerability : CVE-2026-71310

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.0, the shared HTTP CONNECT helper in...