RHEL 10 : .NET 9.0 (RHSA-2026:41895)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:41895 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

RHEL 8 : .NET 8.0 (RHSA-2026:41901)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:41901 advisory. .NET is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR...

AlmaLinux 9 : glibc (ALSA-2026:42952)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:42952 advisory. glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings CVE-2026-5928 glibc: glibc:...

Security update for ImageMagick (moderate)

openSUSE security update: security update for imagemagick ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21391-1 Rating: moderate References: bsc1268640 bsc1270006 bsc1270081 bsc1271100 bsc1271293 bsc1271294 bsc1271311 bsc1271312 bsc1271313...

firefox-esr-140.13.0-1.1 on GA media (moderate)

firefox-esr-140.13.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11329-1 Rating: moderate Cross-References: CVE-2026-15718 CVE-2026-15719 CVE-2026-16349 CVE-2026-16350 CVE-2026-16351 CVE-2026-16352 CVE-2026-16353 CVE-2026-16354 CVE-2026-16355 CVE-2026-16356 CVE-2026-16357 CVE-2026-16358...

Security Bulletin: IBM Cognos Command Center has addressed vulnerabilities

Summary There are vulnerabilities in IBM Cognos Command Center. IBM Cognos Command Center 10.2.5 FP1 IF4 has addressed the applicable CVEs. Please refer to the table in the Related Information section for vulnerability impact. Vulnerability Details CVEID:CVE-2026-34197 DESCRIPTION: Improper Input...

[SECURITY] [DSA 6394-1] firefox-esr security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6394-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 22, 2026 https://www.debian.org/security/faq -...

WordPress Bulk Page Generator – LPagery plugin <= 2.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin Bulk Landing Page Creator for WordPress LPagery versions = 2.5.7...

GHSA-MHM7-754M-9P8W vulnerabilities

Vulnerabilities for packages: cassandra-fips, nacos-docker, spark, thingsboard, ruby3.3-jrjackson, elasticsearch-fips, zookeeper, seata, logstash-fips, hono, apache-tika, apache-activemq-fips, apache-nifi, wavefront-proxy, sonarqube, akhq, flyway-fips, knative-kafka-broker-fips, cassandra,...

GHSA-C97M-VXHJ-P7J6 vulnerabilities

Vulnerabilities for packages: crossplane, crossplane-provider-azure-web, crossplane-provider-aws-resourcegroups-fips, crossplane-provider-aws-secretsmanager-fips, crossplane-provider-gcp-beta-cloudplatform-fips, crossplane-provider-aws-route53recoveryreadiness, crossplane-provider-aws-devicefarm,...

CVE-2026-5160 vulnerabilities

Vulnerabilities for packages: crossplane, crossplane-provider-azure-web, crossplane-provider-aws-resourcegroups-fips, crossplane-provider-aws-secretsmanager-fips, crossplane-provider-gcp-beta-cloudplatform-fips, crossplane-provider-aws-route53recoveryreadiness, crossplane-provider-aws-devicefarm,...

GHSA-G446-98W2-8P5W vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-94PJ-82F3-465W vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-F283-GHQC-FG79 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-WM3W-8RRP-J577 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-59889 vulnerabilities

Vulnerabilities for packages: tez, scala, zookeeper, apache-tika, sonarqube, confluent-kafka, opensearch, jenkins-plugin-manager, druid, infinispan, apache-nifi-registry, strimzi-kafka-operator, wavefront-proxy, akhq, apache-nifi, keycloak-config-cli, ruby3.2-jrjackson, logstash, spark, gradle,...

GHSA-MHM7-754M-9P8W vulnerabilities

Vulnerabilities for packages: tez, zookeeper, apache-tika, sonarqube, confluent-kafka, opensearch, jenkins-plugin-manager, druid, infinispan, wavefront-proxy, akhq, keycloak-config-cli, ruby3.2-jrjackson, logstash, spark, gradle, thingsboard, ruby3.3-jrjackson, cassandra, flyway...

CVE-2026-5160 vulnerabilities

Vulnerabilities for packages: mods, crossplane-provider-aws-memorydb, crossplane-provider-aws-firehose, crossplane-provider-keycloak, gptscript, crossplane-provider-aws-sqs, crossplane-provider-aws-sns, crossplane-provider-azure-storage, crossplane-provider-aws-ec2, dagger,...

GHSA-JPJM-C3R5-Q96R vulnerabilities

Vulnerabilities for packages: kube-rbac-proxy, crossplane-provider-aws-memorydb, spqr, kubo, spicedb, witness, fuse-overlayfs-snapshotter, goreleaser, op-geth, snyk-cli, stern, zarf, go-licenses, k9s, rancher-system-agent, prometheus-alertmanager, docker-machine-driver-linode, ko, step-ca,...

USN-8590-1: Exim vulnerabilities

It was discovered that Exim incorrectly handled certain command line options. A local attacker could possibly use this issue to access files outside of the spool area. It was discovered that Exim incorrectly handled string expansion in .local files. A local attacker could possibly use this issue ...