Fedora 44 : libgit2 (2026-86684eb696)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-86684eb696 advisory. Update to version 1.9.7. Release notes: https://github.com/libgit2/libgit2/releases/tag/v1.9.7 Tenable has extracted the preceding description block directly...

MINI-9CHM-HRH6-GMJ5

Bulletin has no description...

MINI-G2WG-348H-2G38

Bulletin has no description...

MINI-MMMG-3CPR-3R34

Bulletin has no description...

MINI-867M-6R7V-X8F7

Bulletin has no description...

MINI-79RC-2XHX-37P4

Bulletin has no description...

MINI-PJPG-WGP3-Q85G

Bulletin has no description...

CVE-2026-70981

creationtimestamp| type| source ---|---|--- 2026-08-18 22:24:39+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfb2ecfhf2m 2026-08-19 07:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtga3kg6lz2y 2026-08-19 16:47:56+00:00| seen|...

CVE-2026-70954

creationtimestamp| type| source ---|---|--- 2026-08-18 22:23:40+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtfayjlyyl23 2026-08-18 22:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtfbe3dv6f2m 2026-08-19 00:07:33+00:00| seen|...

MINI-GQ4P-GJCW-42PF

Bulletin has no description...

CVE-2026-66603

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in David Artiss Draft List simple-draft-list allows Stored XSS. This issue affects Draft List: from n/a through 2.6.4...

CVE-2026-62377

libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted HEIF sequence accepted by heifcontextreadfrommemory can leave the context with no registered sequence tracks and crash when heifcontextgettrackctx, 0 is called. HeifContext::gettrack in libheif/context.cc...

MINI-JVQ3-5H93-RVFG

Bulletin has no description...

CVE-2026-21582

Crowd Data Center 7.2.1 has a Broken Authentication & Session Management flaw (CVSS 8.8) letting unauthenticated attackers act as other users; Atlassian advises upgrading to 7.2.2 or later . No exploitation details are provided in the documents.

MINI-G9JC-H4WG-WCFV

Bulletin has no description...

MINI-WW88-8PCQ-32VV

Bulletin has no description...

MINI-VWV7-WW29-56JH

Bulletin has no description...

EUVD-2026-62202

4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards allows an authenticated project manager to supply traversal sequences in the filename parameter of GET /exports/:id/:filename. In server/api/controllers/boards/download.js, the decoded inputs.filename value is...

CVE-2026-52854

The MediaWiki Maps extension (versions before 12.1.3) is vulnerable to stored XSS: the display_map parser function's overlays parameter passes unescaped overlay names to Leaflet's layer-control label code, enabling script execution in any viewer's browser. A PoC exists using {{#display_map:0,0|se...

EUVD-2026-62200

Maps is a MediaWiki extension that enables visualization of geographic data through dynamic embedded maps. Prior to version 12.1.3, the displaymap parser function in the Leaflet service accepts attacker-controlled HTML in the overlays parameter, and resources/leaflet/jquery.leaflet.js uses the...