GHSA-WG4G-WM44-CH5J vulnerabilities

Vulnerabilities for packages: rke2-runtime-fips, telegraf, ipfs-cluster, spegel, kubo, k3s, rke2-runtime, kubo-fips, ipfs-cluster-fips, spegel-fips, livekit-egress...

GHSA-WQQC-JJCQ-VFXM vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, spire-server-fips, goreleaser, cloudbeat, trivy-fips, spire-server, tkn, kyverno, neuvector-sigstore-interface, ko-fips, aactl, ko, zarf-fips, cloudbeat-fips, docker-fips, kubescape-server, tekton-chains-fips, policy-controller-fips,...

DEBIAN-CVE-2026-67290

FreeRDP before 3.29.0 contains a heap out-of-bounds read vulnerability in the TSMF FFmpeg decoder when parsing AVC1 MPEG2VIDEOINFO media types with insufficient ExtraData. Attackers can send malformed media format data from a server to trigger a crash by reading fixed offsets without validating...

OPENSUSE-SU-2026:21508-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: - CVE-2024-4367: missing type check when handling fonts in PDF.js can allow arbitrary JavaScript execution bsc1271638. - CVE-2026-39872: maliciously crafted web content can lead to an unexpected process crash bsc1271638. - CVE-2026-43663:...

GHSA-JXR7-X2HM-5G42 vulnerabilities

Vulnerabilities for packages: linux-azure, linux-vmware, linux-qemu, linux-aws, linux-gcp...

GHSA-CJPG-RGQ5-FR37 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry...

GHSA-957G-F97V-VPPC vulnerabilities

Vulnerabilities for packages: apache-nifi-registry...

GHSA-3CHG-M5W7-QFV5 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry...

GHSA-MQ64-J8F9-9GCJ vulnerabilities

Vulnerabilities for packages: apache-nifi-registry...

GHSA-H3QP-GQRC-Q736 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry...

CVE-2026-41853 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry...

Debian dla-4710 : chromium - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4710 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4710-1 [email protected]...

Debian dsa-6408 : chromium - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6408 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6408-1 [email protected] https://www.debian.org/securit...

libblkid-devel-2.42.2-1.1 on GA media (moderate)

libblkid-devel-2.42.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:11408-1 Rating: moderate Cross-References: CVE-2026-13595 CVE-2026-53612 CVE-2026-53613 CVE-2026-53614 CVSS scores: CVE-2026-13595 SUSE : 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H CVE-2026-13595 SUSE : 6.9...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2026:0271-1 Rating: important References: 1272936 Cross-References: CVE-2026-17650 CVE-2026-17651 CVE-2026-17652 CVE-2026-17653 CVE-2026-17654 CVE-2026-17655 CVE-2026-17656 CVE-2026-17657 CVE-2026-17658...

Oracle Linux 10 / 9 : java-25-openjdk (ELSA-2026-42899)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-42899 advisory. 25.0.4.0.7-1.1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:25.0.4.0.7-1.0 - Update to jdk-25.0.4+7 GA - Update release notes to 25.0.4+7 -...

Oracle Linux 8 : nodejs:24 (ELSA-2026-47060)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47060 advisory. - Backport patches for various CVEs Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-194176 RHEL-194179 RHEL-208658 Tenable has...

Microsoft Edge (Chromium) < 151.0.4129.59 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 151.0.4129.59. It is, therefore, affected by multiple vulnerabilities as referenced in the July 31, 2026 advisory. - Use after free in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute...

Linux Distros Unpatched Vulnerability : CVE-2026-63125

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - security update CVE-2026-63125 Note that Nessus relies on the presence of the package as reported by the vendor. C Tenable, Inc...

Oracle Linux 9 : nodejs:22 (ELSA-2026-47058)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47058 advisory. - Fix CVE-2026-59873, CVE-2026-59874 node-tar by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 brace-expansion in npm's bundled...