GO-2026-4942 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, zot, envoy-gateway, portieris, kots, gitness...

Google Chrome < 151.0.7922.173 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 151.0.7922.173. It is, therefore, affected by multiple vulnerabilities as referenced in the 202608stable-channel-update-for-desktop0404570826 advisory. - Use after free in DOM in Google Chrome prior to 151.0.7922.173...

RockyLinux 10 : mysql8.4 (RLSA-2026:56007)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:56007 advisory. mysql: Performance Schema unspecified vulnerability CPU Jul 2026 CVE-2026-61081 mysql: Optimizer unspecified vulnerability CPU Jul 2026 CVE-2026-47064...

Oracle Linux 8 / 9 : java-1.8.0-openjdk (ELSA-2026-55775)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55775 advisory. 1.8.0.504.b01-1.1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:1.8.0.504.b01-1.1 - Update to 8u504-b01 GA. - Update release notes for...

PT-2026-83598

TuxCare rebuilt django to address 2 CVEs. Fixed in 4.2.post7+tuxcare...

KLA91239 Multiple vulnerability in Microsoft Server Software

Multiple vulnerability was found in Microsoft Server Software. Malicious users can exploit this vulnerability to bypass security restrictions, gain privileges. Original advisories CVE-2026-65801 Exploitation Related products Microsoft-Exchange-Online CVE list CVE-2026-65801 unknown Solution Insta...

PT-2026-78975

Name of the Vulnerable Software and Affected Versions Directory Pro versions prior to 2.5.9 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its database...

MATEE: Efficiently Bridging the Semantic Gap in TrustZone Via Arm Pointer Authentication

Trusted Execution Environments TEEs employ hardware-based isolation mechanisms to safeguard the confidentiality and integrity of sensitive code and data. One such prevalent implementation is Arm TrustZone, which partitions the system into the secure and normal non-secure worlds. However, this...

PT-2026-83601

TuxCare rebuilt bootstrap to address 7 CVEs. Fixed in 3.3.1-tuxcare.1...

Oracle Linux 10 / 9 : java-25-openjdk (ELSA-2026-55798)

The remote Oracle Linux 10 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-55798 advisory. 1:25.0.4.1.1-1.1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:25.0.4.1.1-1.1 - Update to jdk-25.0.4.1+1 GA - Update release notes to...

Oracle Linux 9 : mysql:8.4 (ELSA-2026-56973)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-56973 advisory. mecab 0.996-3.4 - Bump version for package rebuild We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo - Resolves: 2182069...

Fedora 46 : yt-dlp (2026-139d3aad5f)

The remote Fedora 46 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-139d3aad5f advisory. Automatic update for yt-dlp-2026.08.19-1.fc46. Changelog Thu Aug 20 2026 Mikel Olasagasti Uranga - 2026.08.19-1 - Update to 2026.08.19 - Closes...

Fedora 45 : yt-dlp (2026-c0410a0829)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-c0410a0829 advisory. Automatic update for yt-dlp-2026.08.19-1.fc45. Changelog Thu Aug 20 2026 Mikel Olasagasti Uranga - 2026.08.19-1 - Update to 2026.08.19 - Closes...

RHEL 10 : kernel (RHSA-2026:57251)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:57251 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/amdkfd: Fix out-of-bound...

GLSA-202608-17 : libssh2: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202608-17 libssh2: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in libssh2. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly...

Slackware Linux 15.0 / current mozilla-thunderbird Multiple Vulnerabilities (SSA:2026-231-02)

The version of mozilla-thunderbird installed on the remote host is prior to 140.14.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-231-02 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues...

Oracle Linux 8 : mysql:8.4 (ELSA-2026-56936)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-56936 advisory. mecab 0.996-2.12 - Bump version for 'mysql' module rebuild We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'AppStream' repo -...

Fedora 44 : firefox (2026-fc11919789)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-fc11919789 advisory. Implement buffer stride support for PipeWire camera. ---- - Update to latest upstream 154.0 - Enabled Wayland session restore on KDE. Tenable has...

Debian dla-4749 : chromium - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4749 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4749-1 [email protected]...

GLSA-202608-20 : acl, attr: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202608-20 acl, attr: Multiple vulnerabilities Multiple vulnerabilities have been discovered in acl and attr. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block...