CVE-2026-59869 vulnerabilities

Vulnerabilities for packages: argo-workflows, prism, ts-patch, eslint, vitess, lerna, code-server, pulumi, sqlpad, kubeflow-katib, kubeflow-centraldashboard, opensearch-dashboards, jupyter-base-notebook...

CVE-2026-60807

CVE-2026-60807 —Oracle E-Business Suite, Oracle Bills of Material (Internal Operations) is affected in versions 12.2.3–12.2.15. An attacker with network access over HTTP and low privileges, after user interaction from a target, can compromise Oracle Bills of Material, potentially leading to takeo...

@aligent/cdk-esbuild (>=2.0.0, <=2.1.0), @aligent/cdk-graphql-mesh-server (>=0.1.5, <=2.17.0) +615 more potentially affected by CVE-2026-13760 via aws-cdk-lib (>=2.0.0, <=2.259.0)

aws-cdk-lib NPM version =2.0.0, =2.0.0, =0.1.5, =2.3.7, =2.0.1, =2.0.0, =2.0.0-beta, =0.0.3, =1.2.15, =5.0.0-ampgenconfig.0, =2.7.0-a-cdkv2-graphql-15.0, =5.0.0-beta.0, =4.1.10-alpha.74, =3.0.0-ampgenconfig.0, =3.7.28 and more Source cves: CVE-2026-13760 Source advisory: OSV:GHSA-VCRF-J523-4MRF...

SUSE SLES15: gstreamer-plugins-bad / gstreamer-plugins-bad-chromaprint / etc (SUSE-SU-2026:3125-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3125-1 advisory. - CVE-2026-12892: 1-byte heap out-of-bounds read in H.264 NAL extension slice parser bsc1268971. - CVE-2026-14935: webrtcbin accept...

UBUNTU-CVE-2026-63847

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/jpeg: set nouserfence for JPEG v2.5 ring JPEG rings do not support 64-bit user fence writes, reject CS submissions with user fences. cherry picked from commit 3216a7f4e2642bda5fd14f57586e835ae9202587...

📄 Mysterium Node Improper Authorization

Improper authorization in the /tequilapi/config/user endpoint of Mysterium Node versions from 1.21.1-rc0 up to 1.36.0 allows an unauthenticated attacker to arbitrarily overwrite the node's configuration and achieve a full node takeover via a crafted POST request. CVE-2026-31309: Improper Access...

CVE-2026-50493 DirectX Graphics Kernel Elevation of Privilege Vulnerability

...

SUSE-SU-2026:2948-1 Security update for perl-HTML-Parser

This update for perl-HTML-Parser fixes the following issue - CVE-2026-8829: HTML:Entities versions before 3.84 for Perl read freed heap memory in decodeentities bsc1267606...

AlmaLinux 10 : podman (ALSA-2026:38495)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:38495 advisory. os: golang: Go os.Root: Symlink following vulnerability allows directory traversal CVE-2026-39822 Tenable has extracted the preceding description block directly...

EulerOS 2.0 SP12 : libpng (EulerOS-SA-2026-2601)

According to the versions of the libpng packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. In...

MiracleLinux 8 : libsolv-0.7.20-7.el8_10 (AXSA:2026-1241:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1241:02 advisory. libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data CVE-2026-48864 Tenable has extracted the...

OESA-2026-2957 nmap security update

Nmap "Network Mapper" is a free and open source license utility for network discovery and security \ auditing. It was designed to rapidly scan large networks, but works fine against single hosts. Security Fixes: Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured...

CVE-2026-47829

creationtimestamp| type| source ---|---|--- 2026-07-09 08:26:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq77krzyza2e 2026-07-09 17:36:07+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqa6blpc522y 2026-07-13 16:52:09+00:00| seen|...

CVE-2026-57111 Apache Helix REST: Permissive CORS Configuration in REST API Allows Unrestricted Cross-Origin

Permissive Cross-Origin Resource Sharing CORS in the REST API helix-rest, org.apache.helix.rest.server.filters.CORSFilter in Apache Helix through 2.0.0 on all platforms allows a remote attacker controlling a web page visited by an authorized user to read responses from and issue cross-origin...

Security Bulletin: IBM WebSphere Application Server, bundled with IBM WebSphere Remote Server, is affected by a cross-site request forgery vulnerability (CVE-2026-8408)

Summary IBM WebSphere Application Server is shipped with IBM WebSphere Remote Server. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

OESA-2026-2878 freeipmi security update

The package provides "Remote-Console" and "System Management software" based on intelligent platform management interface specification. Security Fixes: ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface IPMI...

CVE-2026-14658

creationtimestamp| type| source ---|---|--- 2026-07-05 02:30:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpujspwprh2g...

Oracle Linux 9 : libreoffice (ELSA-2026-28290)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-28290 advisory. - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has Tenable has extracted the preceding description block directly from th...

Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses setuptools which is vulnerable to CVE-2024-6345

Summary IBM Maximo Application Suite - Visual Inspection component uses setuptools which is vulnerable to CVE-2024-6345, This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2024-6345 DESCRIPTION: A vulnerability in the packageindex...

CVE-2023-37524

HCL Traveler for Microsoft Outlook HTMO is susceptible to vulnerabilities due to .NET Framework 4.5 being out of service. Since .NET Framework 4.5 has reached end-of-life and no longer receives security updates, it may expose the application to publicly known security weaknesses through vulnerabl...